Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka Memmove Code Execution, a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Office | Microsoft | 2000 (including) | 2000 (including) |
| Office | Microsoft | 2000-sp1 (including) | 2000-sp1 (including) |
| Office | Microsoft | 2000-sp2 (including) | 2000-sp2 (including) |
| Office | Microsoft | 2000-sp3 (including) | 2000-sp3 (including) |
| Office | Microsoft | 2001 (including) | 2001 (including) |
| Office | Microsoft | 2001-sr1 (including) | 2001-sr1 (including) |
| Office | Microsoft | 2003 (including) | 2003 (including) |
| Office | Microsoft | 2003-sp1 (including) | 2003-sp1 (including) |
| Office | Microsoft | 2003-sp2 (including) | 2003-sp2 (including) |
| Office | Microsoft | 2003-sp3 (including) | 2003-sp3 (including) |
| Office | Microsoft | 2004 (including) | 2004 (including) |
| Office | Microsoft | v.x (including) | v.x (including) |