CVE-2006-2389
Microsoft Office - Remote Code Execution via Malformed Property Record Length
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-2389. PoCs published by anonymous.
AI-analyzed exploit summary This exploit targets CVE-2006-2389, a code execution vulnerability in Microsoft Office 2003. It uses a compressed file and shellcode to achieve remote code execution by corrupting process memory.
Description
Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316.
Exploits (1)
This exploit targets CVE-2006-2389, a code execution vulnerability in Microsoft Office 2003. It uses a compressed file and shellcode to achieve remote code execution by corrupting process memory.