CVE-2006-3649: Buffer Overflow
Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3649?
CVE-2006-3649 is considered a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2006-3649?
To mitigate CVE-2006-3649, users should upgrade to the latest version of Microsoft Office that does not include this vulnerability.
What products are affected by CVE-2006-3649?
CVE-2006-3649 affects Microsoft Visual Basic for Applications SDK versions 6.0 through 6.4 and specific Microsoft Office products.
What are the implications of CVE-2006-3649?
Exploitation of CVE-2006-3649 could allow attackers to execute arbitrary code on the victim's system.
Is there a workaround for CVE-2006-3649?
A temporary workaround for CVE-2006-3649 is to disable VBA in Microsoft Office applications until a patch is applied.