Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2006-3864

Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an "array boundary condition" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868.

  • Published: Oct 11, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-3864
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
microsoft / office 2003-sp1 2003-sp1.x
microsoft / project 2002-sp1 2002-sp1.x
microsoft / office 2004 2004.x
microsoft / office xp-sp3 xp-sp3.x
microsoft / office 2003-sp2 2003-sp2.x
microsoft / visio 2002-sp2 2002-sp2.x
microsoft / project 2000-sr1 2000-sr1.x
microsoft / office - -
microsoft / office 2000-sp3 2000-sp3.x