deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-5188
Published: 2006-10-10
Description: Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22258; http://securityreason.com/securityalert/1698; http://securitytracker.com/id?1016983
CVE: CVE-2006-5189
Published: 2006-10-10
Description: PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appl[APPL] parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20323; https://exchange.xforce.ibmcloud.com/vulnerabilities/29336; https://www.exploit-db.com/exploits/2472
CVE: CVE-2006-5190
Published: 2006-10-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, or (q) zones.php scripts in /admin, and the (2) zpage parameter in (r) admin/geo_zones.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2006/10/oscommerce-multiple-scripts-page-param.html; http://secunia.com/advisories/22275; http://securitytracker.com/id?1016979
CVE: CVE-2006-5191
Published: 2006-10-10
Description: PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/22269; http://www.nivisec.com/article.php?l=vi&ar=20; http://www.osvdb.org/29506
CVE: CVE-2006-5192
Published: 2006-10-10
Description: PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPGREETZ_INCLUDE_DIR parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20352; http://www.vupen.com/english/advisories/2006/3915; https://exchange.xforce.ibmcloud.com/vulnerabilities/29346
CVE: CVE-2006-5193
Published: 2006-10-10
Description: PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/447735/100/0/threaded; http://www.securityfocus.com/archive/1/447896/100/0/threaded; http://www.securityfocus.com/bid/20350
CVE: CVE-2006-5194
Published: 2006-10-10
Description: Cross-site scripting (XSS) vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the username parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22255; http://www.securityfocus.com/archive/1/447535/100/0/threaded; http://www.securityfocus.com/bid/20313
CVE: CVE-2006-5195
Published: 2006-10-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in Wheatblog 1.0 and 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/20306; http://www.securityfocus.com/bid/20306
CVE: CVE-2006-5196
Published: 2006-10-10
Description: The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (device crash) via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter.
CVSS Score: 7.8 (HIGH)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/20309.pl; http://secunia.com/advisories/22359; http://www.securityfocus.com/bid/20309
CVE: CVE-2006-5197
Published: 2006-10-10
Description: PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) /pdshoppro.mdb, (2) /data/pdshoppro.mdb, or (3) /shoppro/data/pdshoppro.mdb.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1016852; http://securitytracker.com/id?1016852
CVE: CVE-2006-5201
Published: 2006-10-10
Description: Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3) JSSE 1.0.3_03 and earlier; (4) IPSec/IKE; (5) Secure Global Desktop; and (6) StarOffice, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents these products from correctly verifying X.509 and other certificates that use PKCS #1.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/22204; http://secunia.com/advisories/22226; http://secunia.com/advisories/22325
CVE: CVE-2006-5202
Published: 2006-10-10
Description: Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048495.html; http://secunia.com/advisories/21372; http://securitytracker.com/id?1016638
CVE: CVE-2006-5203
Published: 2006-10-10
Description: Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the Admin control panel.
CVSS Score: 5.1 (MEDIUM)
References: http://www.securityfocus.com/archive/1/447710/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/29352; http://www.securityfocus.com/archive/1/447710/100/0/threaded
CVE: CVE-2006-5204
Published: 2006-10-10
Description: Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting, which can be leveraged for a cross-site request forgery (CSRF) attack involving forced SQL execution by an admin.
CVSS Score: 2.1 (LOW)
References: http://forums.invisionpower.com/index.php?showtopic=227937; http://secunia.com/advisories/22272; http://www.securityfocus.com/archive/1/447710/100/0/threaded
CVE: CVE-2006-5205
Published: 2006-10-10
Description: Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the dir parameter in (1) index.php and (2) forum/index.php, when the viewimage command in the gallery module is used.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22400; http://www.securityfocus.com/bid/20328; https://exchange.xforce.ibmcloud.com/vulnerabilities/29334
CVE: CVE-2006-5206
Published: 2006-10-10
Description: SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in (1) index.php and (2) forum/index.php, when the rate command in the gallery automodule is used.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22400; http://www.securityfocus.com/bid/20327; https://exchange.xforce.ibmcloud.com/vulnerabilities/29333
CVE: CVE-2006-5207
Published: 2006-10-10
Description: PHP remote file inclusion vulnerability in images/smileys/smileys_packs.php in phpMyTeam 2.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the smileys_dir parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22278; http://www.osvdb.org/29530; http://www.securityfocus.com/archive/1/447842/100/0/threaded
CVE: CVE-2006-5208
Published: 2006-10-10
Description: Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid_search parameter in search.php and (2) the catid parameter in index.php.
CVSS Score: 7.5 (HIGH)
References: http://kzar.co.uk/exploits/phpclassifieds_exploit; http://secunia.com/advisories/22264; http://www.securityfocus.com/bid/20359
CVE: CVE-2006-5209
Published: 2006-10-10
Description: PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/29345; https://www.exploit-db.com/exploits/2475/; https://exchange.xforce.ibmcloud.com/vulnerabilities/29345
CVE: CVE-2006-5211
Published: 2006-10-10
Description: Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to remove OfficeScan clients via a certain HTTP request that invokes the OfficeScan CGI program.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/22156; http://www.securityfocus.com/bid/20330; http://www.trendmicro.com/download/product.asp?productid=5
CVE: CVE-2006-5212
Published: 2006-10-10
Description: Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418, 7.0 before 7.0.0.1257, and 7.3 before 7.3.0.1053 allow remote attackers to delete files via a modified filename parameter in a certain HTTP request that invokes the OfficeScan CGI program.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22156; http://www.securityfocus.com/bid/20330; http://www.trendmicro.com/download/product.asp?productid=5
CVE: CVE-2006-5213
Published: 2006-10-10
Description: Sun Solaris 10 before 20061006 uses "incorrect and insufficient permission checks" that allow local users to intercept or spoof packets by creating a raw socket on a link aggregation (network device aggregation).
CVSS Score: 3.6 (LOW)
References: http://secunia.com/advisories/22246; http://secunia.com/advisories/22992; http://securitytracker.com/id?1017013
CVE: CVE-2006-5214
Published: 2006-10-10
Description: Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a user's Xsession errors file to have weak permissions before a chmod is performed, which allows local users to read Xsession errors files of other users.
CVSS Score: 1.2 (LOW)
References: http://secunia.com/advisories/22323; http://secunia.com/advisories/22439; http://secunia.com/advisories/22469
CVE: CVE-2006-5215
Published: 2006-10-10
Description: The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/22992; http://securitytracker.com/id?1017015; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102652-1
CVE: CVE-2006-5216
Published: 2006-10-10
Description: Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI.
CVSS Score: 7.5 (HIGH)
References: http://exploitlabs.com/files/advisories/EXPL-A-2006-005-shttpd.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050146.html; http://secunia.com/advisories/22294
CVE: CVE-2006-5217
Published: 2006-10-10
Description: SQL injection vulnerability in giris_yap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL commands by simultaneously injecting into the user name and pass fields in uyegiris.asp, also known as the Kullanici Adi (k_a) and Sifre (sifre) parameters.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1700; http://www.securityfocus.com/archive/1/447914/100/0/threaded; http://www.securityfocus.com/bid/20378
CVE: CVE-2006-5218
Published: 2006-10-10
Description: Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain privileges, or read arbitrary kernel memory via large numeric arguments to the systrace ioctl.
CVSS Score: 4.6 (MEDIUM)
References: http://openbsd.org/errata.html#systrace; http://scary.beasts.org/security/CESA-2006-003.html; http://secunia.com/advisories/22324
CVE: CVE-2006-5219
Published: 2006-10-10
Description: SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://cvs.moodle.com/blog/index.php?r1=1.18.2.2&r2=1.18.2.3; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9228&w=2; http://secunia.com/advisories/22309
CVE: CVE-2006-5220
Published: 2006-10-10
Description: Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the webyep_sIncludePath in (1) files in the programm/lib/ directory including (a) WYApplication.php, (b) WYDocument.php, (c) WYEditor.php, (d) WYElement.php, (e) WYFile.php, (f) WYHTMLTag.php, (g) WYImage.php, (h) WYLanguage.php, (i) WYLink.php, (j) WYPath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, and (m) WYTextArea.php; (2) files in the programm/elements/ directory including (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, and (u) WYShortTextElement.php; and (3) programm/webyep.php.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://advisories.echo.or.id/adv/adv48-theday-2006.txt; http://secunia.com/advisories/22336; http://securityreason.com/securityalert/1702
CVE: CVE-2006-4170
Published: 2006-10-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-4812.  Reason: This candidate is a reservation duplicate of CVE-2006-4812.  Notes: All CVE users should reference CVE-2006-4812 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-3435
Published: 2006-10-10
Description: PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation that uses data from within the document. NOTE: this issue is different than other PowerPoint vulnerabilities including CVE-2006-4694.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://securitytracker.com/id?1017030; http://www.kb.cert.org/vuls/id/187028; http://www.osvdb.org/29446
CVE: CVE-2006-3436
Published: 2006-10-10
Description: Cross-site scripting (XSS) vulnerability in Microsoft .NET Framework 2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "ASP.NET controls that set the AutoPostBack property to true".
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22307; http://securitytracker.com/id?1017029; http://www.kb.cert.org/vuls/id/455604
CVE: CVE-2006-3876
Published: 2006-10-10
Description: Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://securitytracker.com/id?1017030; http://www.kb.cert.org/vuls/id/938196; http://www.osvdb.org/29447
CVE: CVE-2006-5221
Published: 2006-10-10
Description: Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) matiere_ID parameter in lire.php or the (2) classe_ID parameter in lire_a_faire.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/22319; http://securityreason.com/securityalert/1701; http://www.securityfocus.com/archive/1/447933/100/0/threaded
CVE: CVE-2006-5222
Published: 2006-10-10
Description: Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/themen_portal_mitte.php or (2) includes/logger_engine.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22287; http://www.securityfocus.com/bid/20367; http://www.vupen.com/english/advisories/2006/3923
CVE: CVE-2006-5223
Published: 2006-10-10
Description: PHP remote file inclusion vulnerability in includes/functions_user_viewed_posts.php in the Nivisec User Viewed Posts Tracker module 1.0 and earlier for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22305; http://securityreason.com/securityalert/1705; http://www.nivisec.com/article.php?l=vi&ar=19
CVE: CVE-2006-5224
Published: 2006-10-10
Description: PHP remote file inclusion vulnerability in includes/logger_engine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22290; http://www.securityfocus.com/bid/20370; http://www.vupen.com/english/advisories/2006/3926
CVE: CVE-2006-5225
Published: 2006-10-10
Description: Multiple SQL injection vulnerabilities in AAIportal before 1.4.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://aai-portal.sourceforge.net/; http://secunia.com/advisories/22150; http://sourceforge.net/project/shownotes.php?release_id=451458
CVE: CVE-2006-5226
Published: 2006-10-10
Description: PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1704; http://www.securityfocus.com/archive/1/448019/100/0/threaded; http://www.securityfocus.com/bid/20405
CVE: CVE-2006-5227
Published: 2006-10-10
Description: Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the $user_agent variable, probably obtained from the User-Agent HTTP header, and possibly (2) the $ip_resolved variable.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22293; http://securityreason.com/securityalert/1706; http://securitytracker.com/id?1017007
CVE: CVE-2006-5228
Published: 2006-10-10
Description: Multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) up_login, (2) up_pass, or (3) up_num_tasks parameters.
CVSS Score: 7.5 (HIGH)
References: http://ackertodo.cvs.sourceforge.net/ackertodo/ackertodo/src/gadget/login.php?r1=1.3&r2=1.4; http://ackertodo.cvs.sourceforge.net/ackertodo/ackertodo/src/gadget/login.php?view=log; http://secunia.com/advisories/22254
CVE: CVE-2006-2387
Published: 2006-10-10
Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.
CVSS Score: 5.1 (MEDIUM)
References: http://securitytracker.com/id?1017031; http://www.kb.cert.org/vuls/id/706668; http://www.securityfocus.com/archive/1/448147/100/0/threaded
CVE: CVE-2006-3434
Published: 2006-10-10
Description: Unspecified vulnerability in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string that triggers memory corruption.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/22339; http://securitytracker.com/id?1017034; http://www.kb.cert.org/vuls/id/234900
CVE: CVE-2006-3647
Published: 2006-10-10
Description: Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0211.html; http://securitytracker.com/id?1017032; http://www.osvdb.org/29440
CVE: CVE-2006-3650
Published: 2006-10-10
Description: Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22339; http://securitytracker.com/id?1017034; http://www.kb.cert.org/vuls/id/534276
CVE: CVE-2006-3651
Published: 2006-10-10
Description: Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693.
CVSS Score: 9.3 (HIGH)
References: http://securitytracker.com/id?1017032; http://www.kb.cert.org/vuls/id/921300; http://www.securityfocus.com/archive/1/449179/100/0/threaded
CVE: CVE-2006-3864
Published: 2006-10-10
Description: Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .DOC, (2) .PPT, or (3) .XLS file that triggers memory corruption, related to an "array boundary condition" (possibly an array index overflow), a different vulnerability than CVE-2006-3434, CVE-2006-3650, and CVE-2006-3868.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22339; http://securitytracker.com/id?1017034; http://secway.org/advisory/AD20061010.txt