Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-0007

Overview

Vulnerability Score 9.3 9.3
CVE Id CVE-2006-0007
Last Modified 07 Mar 2011 09:29:09
Published 11 Jul 2006 05:05:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2006-0007

Summary

Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.

Vulnerable Systems

Application

  • Microsoft Office 2000

  • Microsoft Office 2003

  • Microsoft Office Xp


References

CERT - TA06-192A

CERT-VN - VU#668564

MS - MS06-039

VUPEN - ADV-2006-2757

BID - 18915

BUGTRAQ - 20060712 NSFOCUS SA2006-04 : Microsoft Office GIF Filter Buffer Overflow Vulnerability

OSVDB - 27146

SECTRACK - 1016470

SECUNIA - 21013


Last Updated: 27 May 2016 10:41:29