CVE-2006-1318

high · 9.3

Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, Office 2004 for Mac, and Office X for Mac do not properly parse record lengths, which allows remote attackers to execute arbitrary code via a malformed control in an Office document, aka "Microsoft Office Control Vulnerability."

9.3

CVSS

15.5%

EPSS (exploit prob.)

97th

EPSS percentile

2014-09-19

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-94

Affected products

Vendor	Product	Affected versions
microsoft	office	2000
microsoft	office	2000
microsoft	office	2004
microsoft	office	x
microsoft	office	xp

Check a specific version with /api/v1/cve/match.

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-1318