VULNERABILITY INTELLIGENCE
CVE-2006-2492
CVSS score8.8 HIGH
EPSS probability48.11%
CISA KEVKnown exploited vulnerability
Published2006-05-20
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Microsoft Word Malformed Object Pointer Vulnerability
Vendor / product: Microsoft / Word
Description
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
Weakness classification
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Primary references
- cret@cert.org — Broken Link
- cret@cert.org — Exploit
- cret@cert.org — Exploit
- cret@cert.org — Broken Link, Patch, Vendor Advisory
- cret@cert.org — Broken Link, Third Party Advisory, VDB Entry
- cret@cert.org — Third Party Advisory, US Government Resource
- cret@cert.org — Broken Link, Patch, Vendor Advisory
- cret@cert.org — Broken Link
- cret@cert.org — Broken Link, Patch, Third Party Advisory, VDB Entry
- cret@cert.org — Broken Link, Third Party Advisory, US Government Resource
- cret@cert.org — Broken Link, Third Party Advisory, US Government Resource
- cret@cert.org — Broken Link