CVE-2006-4534

N/A
Published: September 5, 2006 at 05:00 PM UTC
Updated: June 16, 2026 at 10:29 PM UTC
1 product affected across 1 vendorOffice

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 34%

Description

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

References (19)

x_refsource_MISCThird Party Advisory
http://blogs.securiteam.com/?p=586
x_refsource_MISCThird Party Advisory
http://isc.sans.org/diary.php?storyid=1669
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/21735
VDB Entryx_refsource_SECTRACKThird Party Advisory
http://securitytracker.com/id?1016787
Vendor Advisoryx_refsource_MSKBPatch
http://support.microsoft.com/kb/925059
Third Party Advisoryx_refsource_CERT-VNUS Government Resource
http://www.kb.cert.org/vuls/id/806548

CVSS

Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card