CVE-2006-2492Microsoft Word Malformed Object Pointer Vulnerability

Descripción

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• MS06-027 vendor-advisoryPatchVendor Advisory
• oval:org.mitre.oval:def:2068 vdb-entrysignatureBroken Link
• http://isc.sans.org/diary.php?storyid=1345 Exploit
• 25635 vdb-entryBroken Link
• http://www.microsoft.com/technet/security/advisory/919637.mspx Broken LinkPatchVendor Advisory
• oval:org.mitre.oval:def:1738 vdb-entrysignatureBroken Link
• http://isc.sans.org/diary.php?storyid=1346 Exploit
• TA06-164A third-party-advisoryBroken LinkThird Party AdvisoryUS Government Resource
• ADV-2006-1872 vdb-entryBroken Link
• 18037 vdb-entryBroken LinkPatchThird Party Advisory
• 20153 third-party-advisoryBroken LinkPatchVendor Advisory
• word-code-execution(26556) vdb-entryThird Party AdvisoryVDB Entry
• VU#446012 third-party-advisoryThird Party AdvisoryUS Government Resource
• 1016130 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
• oval:org.mitre.oval:def:1418 vdb-entrysignatureBroken Link
• TA06-139A third-party-advisoryBroken LinkThird Party AdvisoryUS Government Resource
• http://blogs.technet.com/msrc/archive/2006/05/19/429353.aspx Broken Link
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2006-2492 US Government Resource