CVE-2006-4534

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 34.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-05 · updated 2026-06-16

Description

Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.

Affected products

Microsoft Office: 2000, 2000-sp1, 2000-sp2, 2000-sp3, 2001, 2001-sr1 (+4)

References

http://blogs.securiteam.com/?p=586
http://isc.sans.org/diary.php?storyid=1669
http://secunia.com/advisories/21735
http://securitytracker.com/id?1016787
http://support.microsoft.com/kb/925059
http://vil.mcafeesecurity.com/vil/content/v_119055.htm
http://www.kb.cert.org/vuls/id/806548
http://www.microsoft.com/technet/security/advisory/925059.mspx
http://www.osvdb.org/28539
http://www.securityfocus.com/archive/1/445162/100/100/threaded
http://www.securityfocus.com/archive/1/445285/100/0/threaded
http://www.securityfocus.com/archive/1/445381/100/0/threaded

Get alerted when CVE-2006-4534 or the next vulnerability affects your stack