CVE-2006-6456

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 32.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-11 · updated 2026-06-16

Description

Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.

Affected products

Microsoft Office: 2000-sp3, 2003-sp2, 2004, xp-sp3
Microsoft Word for Android: 2000, 2002, 2003
Microsoft Word Viewer: 2003
Microsoft Works: 2004, 2005, 2006

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html
http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx
http://isc.sans.org/diary.php?storyid=1925
http://secunia.com/advisories/23205
http://securitytracker.com/id?1017358
http://securitytracker.com/id?1017579
http://vil.mcafeesecurity.com/vil/content/v_141056.htm
http://vil.mcafeesecurity.com/vil/content/v_vul27249.htm
http://www.kb.cert.org/vuls/id/166700
http://www.osvdb.org/30825
http://www.securityfocus.com/archive/1/454069/100/0/threaded

Get alerted when CVE-2006-6456 or the next vulnerability affects your stack