ID CVE-2006-5574
Summary Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project 2003, and Visio 2003 allows user-assisted remote attackers to execute arbitrary code via crafted text that is not properly parsed. If a user were logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:office:2003:sp2:*:pt:*:*:*:*
    cpe:2.3:a:microsoft:office:2003:sp2:*:pt:*:*:*:*
  • cpe:2.3:a:microsoft:office_multilingual_user_interface_pack:2003:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_multilingual_user_interface_pack:2003:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_proofing_tools:2003:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_proofing_tools:2003:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:project_multilingual_user_interface_pack:2003:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:project_multilingual_user_interface_pack:2003:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:visio:2003:sp2:multilingual_user_interface_pack:*:*:*:*:*
    cpe:2.3:a:microsoft:visio:2003:sp2:multilingual_user_interface_pack:*:*:*:*:*
CVSS
Base: 9.3 (as of 17-10-2018 - 21:43)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 21942
hp
  • HPSBST02184
  • SSRT071296
osvdb 31251
sectrack 1017486
secunia 23671
vupen ADV-2007-0102
Last major update 17-10-2018 - 21:43
Published 31-12-2006 - 05:00
Last modified 17-10-2018 - 21:43
Back to Top