CVE-2006-0007
Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3,...
Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
- Record
CVE-2006-0007- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
- Record
CVE-2006-0007- Updated
- 2026-11-02
EUVDEUVD-2006-0015 No score
Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
- Record
EUVD-2006-0015- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7g8r-3735-285h No score
Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3,...
Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
- Record
GHSA-7g8r-3735-285h- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0007 is a high vulnerability (CVSS 9.3) in Microsoft Office, published July 11, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 19.4%, the 97th percentile. No source names a fixed version.
References
securitytracker.com/id?1016470
osvdb.org/27146
archives.neohapsis.com/archives/vulnwatch/2006-q3/0005.html
secunia.com/advisories/21013
securityfocus.com/bid/18915
vupen.com/english/advisories/2006/2757
Show 7 moreShow less
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-039
us-cert.gov/cas/techalerts/TA06-192A.html
kb.cert.org/vuls/id/668564
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A21
nvd.nist.gov/vuln/detail/CVE-2006-0007
github.com/advisories/GHSA-7g8r-3735-285h