CVE Feed

    Dashboard / CVE / CVE-2006-3877

    CVE-2006-3877

    Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.

    Published:Oct 10, 2006
    Last Modified:Apr 23, 2026
    EPS:Oct 10, 2006
    EPSS Score:0.38807
    CVSS Score:9.3

    Affected Products

    Vendor
    Microsoft
    Product
    Access
    Vendor
    Microsoft
    Product
    Excel
    Vendor
    Microsoft
    Product
    Excel Viewer
    Vendor
    Microsoft
    Product
    Frontpage
    Vendor
    Microsoft
    Product
    Infopath
    Vendor
    Microsoft
    Product
    Office
    Vendor
    Microsoft
    Product
    Onenote
    Vendor
    Microsoft
    Product
    Outlook
    Vendor
    Microsoft
    Product
    Powerpoint
    Vendor
    Microsoft
    Product
    Project
    Vendor
    Microsoft
    Product
    Publisher
    Vendor
    Microsoft
    Product
    Visio
    Vendor
    Microsoft
    Product
    Word
    Vendor
    Microsoft
    Product
    Word Viewer

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-69477 (CVSS 7.3) — Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.…
    CVE-2026-69614 (CVSS 8.8) — Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a …
    CVE-2026-69778 (CVSS 8.8) — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…
    CVE-2026-69529 (CVSS 8.8) — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a n…
    CVE-2026-64919 (CVSS 7.8) — Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally…
    CVE-2026-64920 (CVSS 7.8) — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.…
    CVE-2026-64914 (CVSS 7.8) — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.…
    CVE-2026-64908 (CVSS 7.8) — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.…
    CVE-2026-64912 (CVSS 7.8) — Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally…
    CVE-2026-64906 (CVSS 7.8) — Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.…

    References

    http://securitytracker.com/id?1017030
    http://www.kb.cert.org/vuls/id/205948
    http://www.osvdb.org/29448
    http://www.securityfocus.com/archive/1/449179/100/0/threaded
    http://www.securityfocus.com/bid/20325
    http://www.us-cert.gov/cas/techalerts/TA07-044A.html
    http://www.vupen.com/english/advisories/2006/3977
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A220
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A568
    http://securitytracker.com/id?1017030
    http://www.kb.cert.org/vuls/id/205948
    http://www.osvdb.org/29448
    http://www.securityfocus.com/archive/1/449179/100/0/threaded
    http://www.securityfocus.com/bid/20325
    http://www.us-cert.gov/cas/techalerts/TA07-044A.html
    http://www.vupen.com/english/advisories/2006/3977
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A220
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A568

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High