CVE-2006-0008
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft...
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
Exploit likelihood
What each source reports
NVD Score used
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
- Record
CVE-2006-0008- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
- Record
CVE-2006-0008- Updated
- 2026-11-02
EUVDEUVD-2006-0016 No score
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
- Record
EUVD-2006-0016- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wjg5-m2mm-fgxq No score
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft...
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
- Record
GHSA-wjg5-m2mm-fgxq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0008 is a high vulnerability (CVSS 7.2) in Microsoft Office, published February 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.66%, the 76th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1688
vupen.com/english/advisories/2006/0578
securityfocus.com/bid/16643
exchange.xforce.ibmcloud.com/vulnerabilities/24492
securitytracker.com/id?1015631
secunia.com/advisories/18859
Show 10 moreShow less
kb.cert.org/vuls/id/739844
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-009
ryanstyle.com/alert/my/5/ms06_009_eng.html
nvd.nist.gov/vuln/detail/CVE-2006-0008
github.com/advisories/GHSA-wjg5-m2mm-fgxq