CVE-2006-3650: Code Injection
Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3650?
CVE-2006-3650 has a medium severity rating, indicating it poses a moderate risk of exploit.
How do I fix CVE-2006-3650?
To mitigate CVE-2006-3650, users should update their Microsoft Office software to the latest version or apply the available patches.
Which versions of Microsoft Office are affected by CVE-2006-3650?
CVE-2006-3650 affects Microsoft Office 2000, 2003, and specific versions for Mac including 2001 and 2004.
Can CVE-2006-3650 be exploited remotely?
CVE-2006-3650 can be exploited by remote user-assisted attackers through malicious Word documents.
What types of attacks does CVE-2006-3650 allow?
CVE-2006-3650 allows attackers to execute arbitrary code on the affected systems.