CVE-2006-2389: Code Injection
Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2389?
CVE-2006-2389 has been rated with a high severity level due to its potential to allow arbitrary code execution.
How do I fix CVE-2006-2389?
To mitigate CVE-2006-2389, users should install the latest security updates provided by Microsoft for the affected versions of Office.
What products are affected by CVE-2006-2389?
CVE-2006-2389 affects Microsoft Office 2003 SP1 and SP2, Office XP SP3, and Office 2000 SP3.
Can CVE-2006-2389 be exploited remotely?
CVE-2006-2389 requires user interaction, so exploitation typically occurs when a user opens a malicious Office file.
What is the nature of the vulnerability in CVE-2006-2389?
CVE-2006-2389 is caused by memory corruption related to record lengths in Microsoft Office files.