CVE-2006-2389CWE-94code-injection

CVE-2006-2389

High · published July 12, 2006

CVSS v2.0
9.3
EPSS
39%
Percentile
98.6
In the wild
Unconfirmed
What it is

⚠️ A seemingly innocent Office file could be your worst nightmare! This unspecified vulnerability in Microsoft Office products allows crafty attackers to execute arbitrary code simply by sharing a malformed document. 🔥 Think of it like a restaurant that serves food with a hidden ingredient that could cause a major allergic reaction without the chef ever mentioning it. If someone isn't paying attention to what's on their plate, disaster can strike! If exploited, this vulnerability could lead to an attacker running any code they desire on the victim's machine, potentially stealing sensitive information, installing malware, or taking full control of the system. It’s like handing over the keys to your kingdom without even realizing it!

Put simply

Think of it like a restaurant that serves food with a hidden ingredient that could cause a major allergic reaction without the chef ever mentioning it. If someone isn't paying attention to what's on their plate, disaster can strike! The vulnerability lies in the way Microsoft Office handles malformed properties related to record lengths. When a specially crafted Office document is opened, it triggers memory corruption, paving the way for remote code execution if an attacker baits a user into opening the file.

What to do

If exploited, this vulnerability could lead to an attacker running any code they desire on the victim's machine, potentially stealing sensitive information, installing malware, or taking full control of the system. It’s like handing over the keys to your kingdom without even realizing it! To protect yourself, ensure all Microsoft Office products are updated to the latest patches. Remind users to be cautious about opening files from unknown sources and consider implementing email filters to screen attachments. Regular security training can empower users to spot potential threats. 🛡️ You've got this! Stay alert and by following these steps, you'll keep your systems safe and secure. 💪✨

The record
Technical detail
CVSS v2.0
9.3 · HIGH
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.38723 · 98.6th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2006-07-12T01:05Z
Affected products (4)
ProductVersionsFixed in
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/officeall versions—
References (20)
http://secunia.com/advisories/21012 · [email protected]http://securitytracker.com/id?1016469 · [email protected]http://www.kb.cert.org/vuls/id/409316 · [email protected]http://www.osvdb.org/27149 · [email protected]http://www.securityfocus.com/bid/18911 · [email protected]http://www.us-cert.gov/cas/techalerts/TA06-192A.html · [email protected]http://www.vupen.com/english/advisories/2006/2756 · [email protected]https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/27609 · [email protected]https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A279 · [email protected]http://secunia.com/advisories/21012 · af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016469 · af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/409316 · af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/27149 · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/18911 · af854a3a-2127-422b-91ae-364da2661108http://www.us-cert.gov/cas/techalerts/TA06-192A.html · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2756 · af854a3a-2127-422b-91ae-364da2661108https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27609 · af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A279 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 11 JUL 21:00Z
    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute…
    cvelistv5