CVE-2006-6561

EXPLOITED

Microsoft Word 2000, 2002 and Word Viewer 2003 - Remote Code Execution via Crafted DOC File

Title source: llm

Exploitation Summary

CVE-2006-6561 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit.

AI-analyzed exploit summary The provided text describes a two-stage memory corruption vulnerability in Microsoft Word (CVE-2006-6561), detailing specific memory offsets and values used to trigger a crash or potential pointer overwrite. It includes a reference to a PoC document but does not contain functional exploit code.

Description

Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.

Exploits (1)

exploitdb WRITEUP

doswindows

https://www.exploit-db.com/exploits/2922

View Code ZIP pw:eip

The provided text describes a two-stage memory corruption vulnerability in Microsoft Word (CVE-2006-6561), detailing specific memory offsets and values used to trigger a crash or potential pointer overwrite. It includes a reference to a PoC document but does not contain functional exploit code.

Classification

Writeup 80%

Attack Type

Rce

Complexity

Moderate

Reliability

Theoretical

Target: Microsoft Word (specific version not specified)

No auth needed

Prerequisites: Victim opens a maliciously crafted Word document

MITRE ATT&CK