Unrated severityNVD Advisory· Published Oct 10, 2006· Updated Apr 23, 2026
CVE-2006-3650
CVE-2006-3650
Description
Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.
Affected products
16cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2000:*:*:ja:*:*:*:*
- cpe:2.3:a:microsoft:office:2000:*:*:ko:*:*:*:*
- cpe:2.3:a:microsoft:office:2000:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2000:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2000:*:*:zh:*:*:*:*
- cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2001:*:*:*:*:mac_os:*:*
- cpe:2.3:a:microsoft:office:2001:sr1:*:*:*:mac_os:*:*
- cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2003:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2004:*:*:*:*:mac_os:*:*
- cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- secunia.com/advisories/22339nvdVendor Advisory
- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.kb.cert.org/vuls/id/534276nvdThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/20383nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2006/3981nvdVendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-06-034.htmlnvdThird Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A222nvdThird Party Advisory
- www.osvdb.org/29428nvdBroken Link
- www.securityfocus.com/archive/1/448151/100/0/threadednvd
- www.securityfocus.com/archive/1/449179/100/0/threadednvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-062nvd
News mentions
0No linked articles in our index yet.