CVE-2006-1318

N/A

Description

Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, Office 2004 for Mac, and Office X for Mac do not properly parse record lengths, which allows remote attackers to execute arbitrary code via a malformed control in an Office document, aka "Microsoft Office Control Vulnerability."

CVE Details

CVSS v3.1 ScoreN/A

Published9/19/2014

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

microsoft:office

Weaknesses (CWE)

CWE-94

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038(secure@microsoft.com)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.