CVE-2006-0009

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-14 · updated 2026-06-16

Description

Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.

Affected products

Microsoft Office: 2000-sp3, 2003-sp1, 2003-sp2, 2004, v.x, xp-sp3
Microsoft Works: 2000, 2001, 2002, 2003, 2004, 2005 (+1)

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.html
http://blogs.securiteam.com/?author=28
http://blogs.securiteam.com/?p=557
http://blogs.securiteam.com/?p=559
http://isc.sans.org/diary.php?storyid=1618
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049540.html
http://secunia.com/advisories/19138
http://secunia.com/advisories/19238
http://securitytracker.com/id?1015766
http://securitytracker.com/id?1016720
http://securitytracker.com/id?1016886
http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm

Get alerted when CVE-2006-0009 or the next vulnerability affects your stack