Oval Definition:oval:org.mitre.oval:def:4
Revision Date:2013-02-18Version:7
Title:Microsoft Word Vulnerability
Description:Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2006-3647
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):Microsoft Word
Definition Synopsis
  • Word 2000
  • Microsoft Word 2000 is installed
  • AND the version of winword.exe is less than 9.0.0.8951
  • OR Word 2002
  • Microsoft Word 2002 is installed
  • AND the version of winword.exe is less than 10.0.6818.0
  • OR Word 2003
  • Microsoft Word 2003 is installed
  • AND the version of winword.exe is less than 11.0.8106.0
  • OR Word Viewer
  • Microsoft Word Viewer is installed
  • AND the version of wordview.exe is less than 11.0.8104.0
  • BACK