Vulnerability Name:

CVE-2006-5574 (CCN-31196)

Assigned:2006-12-31
Published:2006-12-31
Updated:2018-10-17
Summary:Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project 2003, and Visio 2003 allows user-assisted remote attackers to execute arbitrary code via crafted text that is not properly parsed.
If a user were logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system.
CVSS v3 Severity:9.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.6 High (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C)
5.6 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-noinfo
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2006-5574

Source: CCN
Type: SA23671
Microsoft Office Brazilian Portuguese Grammar Checker Vulnerability

Source: SECUNIA
Type: Third Party Advisory
23671

Source: CCN
Type: SECTRACK ID: 1017486
Microsoft Office Brazilian Portuguese Grammar Checker Lets Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: Third Party Advisory
1017486

Source: CCN
Type: ASA-2007-008
MS07-001 Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution (921585)

Source: CCN
Type: Microsoft Security Bulletin MS07-001
Vulnerability in Microsoft Office 2003 Brazilian Portuguese Grammar Checker Could Allow Remote Code Execution (921585)

Source: OSVDB
Type: Broken Link
31251

Source: CCN
Type: OSVDB ID: 31251
Microsoft Office 2003 Brazilian Portuguese Grammar Checker Arbitrary Code Execution

Source: HP
Type: UNKNOWN
HPSBST02184

Source: BID
Type: Third Party Advisory, VDB Entry
21942

Source: CCN
Type: BID-21942
Microsoft Office Brazilian Portuguese Grammar Checker Remote Code Execution Vulnerability

Source: VUPEN
Type: Third Party Advisory
ADV-2007-0102

Source: MS
Type: UNKNOWN
MS07-001

Source: XF
Type: UNKNOWN
office-brazilian-grammar-bo(31196)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:microsoft:office:2003:sp2:*:pt:*:*:*:*
  • OR cpe:/a:microsoft:office_multilingual_user_interface_pack:2003:sp2:*:*:*:*:*:*
  • OR cpe:/a:microsoft:office_proofing_tools:2003:sp2:*:*:*:*:*:*
  • OR cpe:/a:microsoft:project_multilingual_user_interface_pack:2003:sp2:*:*:*:*:*:*
  • OR cpe:/a:microsoft:visio:2003:sp2:multilingual_user_interface_pack:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:microsoft:word:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:outlook:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:visio:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:frontpage:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:publisher:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:excel:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:powerpoint:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:office_infopath:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:onenote:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:access:2003:*:*:*:*:*:*:*
  • OR cpe:/a:microsoft:office:2003:sp2:*:*:*:*:*:*
  • OR cpe:/a:microsoft:office_multilingual_user_interface_pack:2003:sp2:*:*:*:*:*:*
  • OR cpe:/a:microsoft:project_multilingual_user_interface_pack:2003:sp2:*:*:*:*:*:*
  • OR cpe:/a:microsoft:office_proofing_tools:2003:sp2:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    microsoft office 2003 sp2
    microsoft office multilingual user interface pack 2003 sp2
    microsoft office proofing tools 2003 sp2
    microsoft project multilingual user interface pack 2003 sp2
    microsoft visio 2003 sp2
    microsoft word 2003
    microsoft outlook 2003
    microsoft visio 2003
    microsoft frontpage 2003
    microsoft publisher 2003
    microsoft excel 2003
    microsoft powerpoint 2003
    microsoft office infopath 2003
    microsoft onenote 2003
    microsoft access 2003
    microsoft office 2003 sp2
    microsoft office multilingual user interface pack 2003 sp2
    microsoft project multilingual user interface pack 2003 sp2
    microsoft office proofing tools 2003 sp2