CVE-2006-2492

high Microsoft ⚠️ CISA KEV — Exploited in the Wild
CVSS v3 Base Score
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
77.8%
Exploitation probability in 30 days
Top 1% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Published: May 20, 2006 (7299 days ago)
Last Modified: April 16, 2026
Vendor: Microsoft
Source: NVD

⚠️ CISA Known Exploited Vulnerability

Added to KEV: 2022-06-08
Remediation Due: 2022-06-22 (⚠ 1422d overdue)

Description

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.

CWE

CWE-120

Affected Products

microsoft officemicrosoft works suite

References

🔗 blogs.technet.com 🔗 isc.sans.org 🔗 isc.sans.org 🔗 secunia.com 🔗 securitytracker.com