CVE-2006-3493: Buffer Overflow
Buffer overflow in LsCreateLine function (mso203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3493?
CVE-2006-3493 is classified as a medium severity vulnerability due to its ability to cause denial of service through crafted documents.
How do I fix CVE-2006-3493?
To mitigate CVE-2006-3493, update Microsoft Office to the latest service pack or version provided by Microsoft.
Which versions of Microsoft Office are affected by CVE-2006-3493?
CVE-2006-3493 affects Microsoft Office 2000, XP, and 2003 in various service pack versions.
What type of attack is associated with CVE-2006-3493?
CVE-2006-3493 is associated with remote user-assisted attacks that exploit specially crafted Word documents.
What is the impact of CVE-2006-3493?
The impact of CVE-2006-3493 includes potential crashes of Microsoft Word and other Office applications upon opening a malicious document.