CVE-2006-0009

Published: Mar 14, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.

Affected (13)

Products: Microsoft: Office, Works

Microsoft

2 products

Office

Works

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2000 sp3
Microsoft Office	Version 2003 sp1
Microsoft Office	Version 2003 sp2
Microsoft Office	Version 2004
Microsoft Office	Version v.x
Microsoft Office	Version xp sp3
Microsoft Works	Version 2000
Microsoft Works	Version 2001
Microsoft Works	Version 2002
Microsoft Works	Version 2003
Microsoft Works	Version 2004
Microsoft Works	Version 2005
Microsoft Works	Version 2006

References (72)

http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.html

Source: secure@microsoft.com

http://blogs.securiteam.com/?author=28

Source: secure@microsoft.com

http://blogs.securiteam.com/?p=557

Source: secure@microsoft.com

http://blogs.securiteam.com/?p=559

Source: secure@microsoft.com

http://isc.sans.org/diary.php?storyid=1618

Source: secure@microsoft.com

http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049540.html

Source: secure@microsoft.com

http://secunia.com/advisories/19138

Source: secure@microsoft.com

PatchVendor Advisory

http://secunia.com/advisories/19238

Source: secure@microsoft.com

http://securitytracker.com/id?1015766

Source: secure@microsoft.com

Patch

http://securitytracker.com/id?1016720

Source: secure@microsoft.com

http://securitytracker.com/id?1016886

Source: secure@microsoft.com

http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm

Source: secure@microsoft.com

http://www.darkreading.com/document.asp?doc_id=101970

Source: secure@microsoft.com

http://www.kb.cert.org/vuls/id/682820

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/23903

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/427671/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/432004/30/5340/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/443890/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/444051/100/200/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/446370/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/446425/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/17000

Source: secure@microsoft.com

Patch

http://www.securityfocus.com/bid/20059

Source: secure@microsoft.com

http://www.symantec.com/enterprise/research/SYMSA-2006-001.txt

Source: secure@microsoft.com

http://www.symantec.com/security_response/writeup.jsp?docid=2006-091810-5028-99

Source: secure@microsoft.com

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_MDROPPER.BH

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA06-073A.html

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2006/0950

Source: secure@microsoft.com

http://www.vupen.com/english/advisories/2006/3678

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/25009

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/29009

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1504

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1553

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1653

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A798

Source: secure@microsoft.com

http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.html