Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-3493 Details

Description

Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://blogs.technet.com/msrc/archive/2006/07/10/441006.aspx	CVE
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047732.html	CVE
http://marc.info/?l=full-disclosure&m=115231380526820&w=2	CVE
http://marc.info/?l=full-disclosure&m=115261598510657&w=2	CVE
http://securitytracker.com/id?1016453	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/27617	CVE
http://www.securityfocus.com/archive/1/439649/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/439878/100/0/threaded	CVE
http://www.securityfocus.com/bid/18905	CVE	Exploit
http://www.vupen.com/english/advisories/2006/2720	CVE
http://blogs.technet.com/msrc/archive/2006/07/10/441006.aspx	[email protected]
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047732.html	[email protected]
http://marc.info/?l=full-disclosure&m=115231380526820&w=2	[email protected]
http://marc.info/?l=full-disclosure&m=115261598510657&w=2	[email protected]
http://securitytracker.com/id?1016453	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/27617	[email protected]
http://www.securityfocus.com/archive/1/439649/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/439878/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/18905	[email protected]	Exploit
http://www.vupen.com/english/advisories/2006/2720	[email protected]

see all 20 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]

Affected Products

Product	Versions
microsoft office	2000 2000 sp1 2000 sp2 2000 sp3 2003
CPE cpe:2.3:a:microsoft:office:2000:::::::* cpe:2.3:a:microsoft:office:2000:sp1:::::: cpe:2.3:a:microsoft:office:2000:sp2:::::: cpe:2.3:a:microsoft:office:2000:sp3:::::: cpe:2.3:a:microsoft:office:2003:::::::* cpe:2.3:a:microsoft:office:2003:sp1:::::: cpe:2.3:a:microsoft:office:2003:sp2:::::: cpe:2.3:a:microsoft:office:2003:sp3:::::: cpe:2.3:a:microsoft:office:xp:::::::* cpe:2.3:a:microsoft:office:xp:sp1:::::: cpe:2.3:a:microsoft:office:xp:sp2:::::: cpe:2.3:a:microsoft:office:xp:sp3:::::: Remediation No remediation found in references.

Product

Versions

microsoft office

2000

2000 sp1

2000 sp2

2000 sp3

2003

CPE

cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:xp:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

12 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 18, 2018	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Feb 19, 2017	CVE Modified	[email protected]
Nov 19, 2016	CVE Modified	[email protected]
Oct 20, 2016	CVE Translated	[email protected]
Oct 18, 2016	CVE Modified	[email protected]
Jul 12, 2006	Initial Analysis	[email protected]