جزئیات آسیب‌پذیری

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-027 vendor-advisoryx_refsource_MS
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2068 vdb-entrysignaturex_refsource_OVAL
• http://isc.sans.org/diary.php?storyid=1345 x_refsource_MISC
• http://www.osvdb.org/25635 vdb-entryx_refsource_OSVDB
• http://www.microsoft.com/technet/security/advisory/919637.mspx x_refsource_CONFIRM
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1738 vdb-entrysignaturex_refsource_OVAL
• http://isc.sans.org/diary.php?storyid=1346 x_refsource_MISC
• http://www.us-cert.gov/cas/techalerts/TA06-164A.html third-party-advisoryx_refsource_CERT
• http://www.vupen.com/english/advisories/2006/1872 vdb-entryx_refsource_VUPEN
• http://www.securityfocus.com/bid/18037 vdb-entryx_refsource_BID
• http://secunia.com/advisories/20153 third-party-advisoryx_refsource_SECUNIA
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26556 vdb-entryx_refsource_XF
• http://www.kb.cert.org/vuls/id/446012 third-party-advisoryx_refsource_CERT-VN
• http://securitytracker.com/id?1016130 vdb-entryx_refsource_SECTRACK
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1418 vdb-entrysignaturex_refsource_OVAL
• http://www.us-cert.gov/cas/techalerts/TA06-139A.html third-party-advisoryx_refsource_CERT
• http://blogs.technet.com/msrc/archive/2006/05/19/429353.aspx x_refsource_MISC
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2006-2492 government-resource