CVE-2006-2492 Microsoft Word Malformed Object Pointer
User-assisted attackers can execute arbitrary code via a buffer overflow in Microsoft Word triggered by a malformed object pointer.
- Exploited in the wild
- Since 8 Jun 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2006-2492?
CVE-2006-2492 is a high-severity memory corruption vulnerability in Microsoft Office, published on 20 May 2006. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
Weakness: CWE-120
Which versions are affected by CVE-2006-2492?
It affects 2 products.
Products include Microsoft Office, Microsoft Works Suite.
How do I fix CVE-2006-2492?
No fix has been published for CVE-2006-2492 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 22 Jun 2022.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2006-2492 being exploited?
Yes. Attackers have exploited CVE-2006-2492 in the wild since at least 8 Jun 2022.
Other vulnerabilities in Microsoft Office
Sources
Also known as GHSA-pvcc-qqxr-p978.