CVE-2006-3647

Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka Memmove Code Execution, a different vulnerability than CVE-2006-3651 and CVE-2006-4693.

Affected Software

Name	Vendor	Start Version	End Version
Office	Microsoft	2000 (including)	2000 (including)
Office	Microsoft	2000-sp1 (including)	2000-sp1 (including)
Office	Microsoft	2000-sp2 (including)	2000-sp2 (including)
Office	Microsoft	2000-sp3 (including)	2000-sp3 (including)
Office	Microsoft	2001 (including)	2001 (including)
Office	Microsoft	2001-sr1 (including)	2001-sr1 (including)
Office	Microsoft	2003 (including)	2003 (including)
Office	Microsoft	2003-sp1 (including)	2003-sp1 (including)
Office	Microsoft	2003-sp2 (including)	2003-sp2 (including)
Office	Microsoft	2003-sp3 (including)	2003-sp3 (including)
Office	Microsoft	2004 (including)	2004 (including)
Office	Microsoft	v.x (including)	v.x (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3647
CWE	https://cwe.mitre.org/data/definitions/189.html

Affected Software

References