{"id":"CVE-2006-6456","published":"2006-12-11T17:00:00Z","modified":"2024-08-07T20:26:46Z","title":"Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is an unspecified memory corruption vulnerability triggered by malformed data structures, affecting Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003. An attacker who can get a crafted document to a target can execute code remotely.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:22:28Z"},"cvss":null,"epss":{"score":0.32163,"percentile":0.98311,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2007-02-13","exploitedFirstSeen":"2007-02-13","ransomware":false,"evidence":[{"url":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014","date":"2007-02-13"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"CVE -CVE Reference Map for Source MS - Curios RE active candidates CVE version 20061101","url":"https://otx.alienvault.com/pulse/679c3446de4f362fac9217f9","created":"2025-01-31"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A746","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://securitytracker.com/id?1017579","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://vil.mcafeesecurity.com/vil/content/v_vul27249.htm","tags":["x_refsource_MISC"]},{"url":"http://secunia.com/advisories/23205","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://isc.sans.org/diary.php?storyid=1925","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/archive/1/454069/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.securityfocus.com/bid/21518","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securityfocus.com/archive/1/454093/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.vupen.com/english/advisories/2007/0435","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.osvdb.org/30825","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-044A.html","tags":["third-party-advisory","x_refsource_CERT"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30806","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://vil.mcafeesecurity.com/vil/content/v_141056.htm","tags":["x_refsource_MISC"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014","tags":["vendor-advisory","x_refsource_MS"]},{"url":"http://www.kb.cert.org/vuls/id/166700","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"http://www.vupen.com/english/advisories/2006/4920","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://www.securityfocus.com/archive/1/454072/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx","tags":["x_refsource_CONFIRM"]},{"url":"http://securitytracker.com/id?1017358","tags":["vdb-entry","x_refsource_SECTRACK"]}],"techniques":[],"reports":[{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"attempts to exploit the vulnerability CVE-2006-6456, addressed by Microsoft","start":234502,"end":234577}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2006-6439","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6439","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2006-12-11","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2006-6456","provenance":"source"},{"date":"2007-02-13","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":59.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 7198 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.66,"detail":"percentile 0.9831"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}