CVE-2006-3493

medium · 5.1

Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees.

5.1

CVSS

40.4%

EPSS (exploit prob.)

99th

EPSS percentile

2006-07-10

Published

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
microsoft	office	2000
microsoft	office	2000
microsoft	office	2000
microsoft	office	2000
microsoft	office	2003
microsoft	office	2003
microsoft	office	2003
microsoft	office	2003
microsoft	office	xp
microsoft	office	xp
microsoft	office	xp
microsoft	office	xp

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-3493