CVE-2006-4534

Summary

CVE	CVE-2006-4534
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2006-09-05 17:04:00 UTC
Updated	2018-10-30 16:25:00 UTC
Description	Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.

Risk And Classification

Problem Types: NVD-CWE-noinfo

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Microsoft	Office	2000	All	All	All
Application	Microsoft	Office	2000	All	All	ja
Application	Microsoft	Office	2000	All	All	ko
Application	Microsoft	Office	2000	All	All	zh
Application	Microsoft	Office	2000	sp1	All	All
Application	Microsoft	Office	2000	sp2	All	All
Application	Microsoft	Office	2000	sp3	All	All
Application	Microsoft	Office	2001	All	All	All
Application	Microsoft	Office	2001	All	All	All
Application	Microsoft	Office	2001	sr1	All	All
Application	Microsoft	Office	2003	All	All	All
Application	Microsoft	Office	2003	sp1	All	All
Application	Microsoft	Office	2003	sp2	All	All
Application	Microsoft	Office	2003	sp3	All	All
Application	Microsoft	Office	2000	All	All	All
Application	Microsoft	Office	2000	All	All	ja
Application	Microsoft	Office	2000	All	All	ko
Application	Microsoft	Office	2000	All	All	zh
Application	Microsoft	Office	2000	sp1	All	All
Application	Microsoft	Office	2000	sp2	All	All
Application	Microsoft	Office	2000	sp3	All	All
Application	Microsoft	Office	2001	All	All	All
Application	Microsoft	Office	2001	All	All	All
Application	Microsoft	Office	2001	sr1	All	All
Application	Microsoft	Office	2003	All	All	All
Application	Microsoft	Office	2003	sp1	All	All
Application	Microsoft	Office	2003	sp2	All	All
Application	Microsoft	Office	2003	sp3	All	All

References

Reference	Source	Link	Tags
SecurityFocus	BUGTRAQ	www.securityfocus.com
Microsoft Word Code Execution Vulnerabilities - Advisories - Secunia	SECUNIA	secunia.com	Vendor Advisory
SecuriTeam Blogs » Microsoft Word 0-day Vulnerability FAQ - September 2006, CVE-2006-4534 [UPDATED]	MISC	blogs.securiteam.com	Third Party Advisory
SecurityFocus	BUGTRAQ	www.securityfocus.com
US-CERT Vulnerability Note VU#806548	CERT-VN	www.kb.cert.org	Third Party Advisory, US Government Resource
Repository / Oval Repository	OVAL	oval.cisecurity.org	Third Party Advisory
Trojan.Mdropper.Q \| Symantec	MISC	www.symantec.com	Third Party Advisory
SecurityFocus	BUGTRAQ	www.securityfocus.com
Microsoft Word Malformed Stack Remote Code Execution Vulnerability	BID	www.securityfocus.com	Third Party Advisory, VDB Entry
SecurityTracker.com Archives - Microsoft Word Record Validation Vulnerability Lets Remote Users Execute Arbitrary Code	SECTRACK	securitytracker.com	Third Party Advisory, VDB Entry
Microsoft Security Bulletin MS06-060 - Critical \| Microsoft Docs	MS	docs.microsoft.com
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH	VUPEN	www.vupen.com	Vendor Advisory
W32/MoFei.worm.dr	MISC	vil.mcafeesecurity.com	Third Party Advisory
Microsoft Security Advisory: Vulnerability in Word could allow remote code execution	MSKB	support.microsoft.com	Patch, Vendor Advisory
Your request has been blocked. This could be due to several reasons.	CONFIRM	www.microsoft.com	Patch, Vendor Advisory
SecurityFocus	HP	www.securityfocus.com
IBM X-Force Exchange	XF	exchange.xforce.ibmcloud.com	Third Party Advisory, VDB Entry
28539	OSVDB	www.osvdb.org	Broken Link
SANS Internet Storm Center; Cooperative Network Security Community - Internet Security - isc	MISC	isc.sans.org	Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.