CVE-2006-6456

概要

参考情報

• archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html
• archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html
• blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx · Vendor Advisory
• isc.sans.org/diary.php · Vendor Advisory
• secunia.com/advisories/23205 · Vendor Advisory
• securitytracker.com/id
• securitytracker.com/id
• vil.mcafeesecurity.com/vil/content/v_141056.htm · Vendor Advisory
• vil.mcafeesecurity.com/vil/content/v_vul27249.htm · Vendor Advisory
• kb.cert.org/vuls/id/166700 · Third Party Advisory
• osvdb.org/30825
• securityfocus.com/archive/1/454069/100/0/threaded
• securityfocus.com/archive/1/454072/100/0/threaded

office のその他の脆弱性

• CVE-2026-70105高 7.5Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-55054中 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-47293高 7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
• CVE-2026-42832中 5.5Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-42831高 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.