CVE-2006-6456

Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.

• http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html
• http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html
• http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspxVendor Advisory
• http://isc.sans.org/diary.php?storyid=1925Vendor Advisory
• http://secunia.com/advisories/23205Vendor Advisory
• http://securitytracker.com/id?1017358
• http://securitytracker.com/id?1017579
• http://vil.mcafeesecurity.com/vil/content/v_141056.htmVendor Advisory
• http://vil.mcafeesecurity.com/vil/content/v_vul27249.htmVendor Advisory
• http://www.kb.cert.org/vuls/id/166700Third Party Advisory, US Government Resource
• http://www.osvdb.org/30825
• http://www.securityfocus.com/archive/1/454069/100/0/threaded
• http://www.securityfocus.com/archive/1/454072/100/0/threaded
• http://www.securityfocus.com/archive/1/454093/100/0/threaded
• http://www.securityfocus.com/bid/21518
• http://www.us-cert.gov/cas/techalerts/TA07-044A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/4920
• http://www.vupen.com/english/advisories/2007/0435
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30806
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A746
• http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html
• http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html
• http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspxVendor Advisory
• http://isc.sans.org/diary.php?storyid=1925Vendor Advisory
• http://secunia.com/advisories/23205Vendor Advisory
• http://securitytracker.com/id?1017358
• http://securitytracker.com/id?1017579
• http://vil.mcafeesecurity.com/vil/content/v_141056.htmVendor Advisory
• http://vil.mcafeesecurity.com/vil/content/v_vul27249.htmVendor Advisory
• http://www.kb.cert.org/vuls/id/166700Third Party Advisory, US Government Resource
• http://www.osvdb.org/30825
• http://www.securityfocus.com/archive/1/454069/100/0/threaded
• http://www.securityfocus.com/archive/1/454072/100/0/threaded
• http://www.securityfocus.com/archive/1/454093/100/0/threaded
• http://www.securityfocus.com/bid/21518
• http://www.us-cert.gov/cas/techalerts/TA07-044A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/4920
• http://www.vupen.com/english/advisories/2007/0435
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30806
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A746

Published

Dec 11, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6450Multiple SQL injection vulnerabilities in dagent/downloadrep…
• CVE-2006-6451Multiple cross-site scripting (XSS) vulnerabilities in SWsof…
• CVE-2006-6452Multiple cross-site scripting (XSS) vulnerabilities in the M…
• CVE-2006-6453PHP remote file inclusion vulnerability in JOWAMP_ShowPage.p…
• CVE-2006-6454execInBackground.php in J-OWAMP Web Interface 2.1b and earli…
• CVE-2006-6455Multiple SQL injection vulnerabilities in admin/default.asp …
• CVE-2006-6457tiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly oth…
• CVE-2006-6458The Trend Micro scan engine before 8.320 for Windows and bef…
• CVE-2006-6459Cross-site scripting (XSS) vulnerability in toplist.php in P…
• CVE-2006-6460Yourfreeworld.com Short Url & Url Tracker Script allows remo…
• CVE-2006-6461tr1.php in Yourfreeworld Stylish Text Ads Script allows remo…
• CVE-2006-6462PHP remote file inclusion vulnerability in engine/oldnews.in…