CVE-2006-0009
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows...
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
- Record
CVE-2006-0009- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
- Record
CVE-2006-0009- Updated
- 2026-11-02
EUVDEUVD-2006-0017 No score
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
- Record
EUVD-2006-0017- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cg6j-ghhp-9v83 No score
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows...
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
- Record
GHSA-cg6j-ghhp-9v83- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0009 is a medium vulnerability (CVSS 5.1) in Microsoft Office, published March 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.2%, the 96th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/432004/30/5340/threaded
vupen.com/english/advisories/2006/3678
kb.cert.org/vuls/id/682820
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1504
symantec.com/security_response/writeup.jsp?docid=2006-091810-5028-99
Show 33 moreShow less
archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.html
darkreading.com/document.asp?doc_id=101970
securitytracker.com/id?1016886
isc.sans.org/diary.php?storyid=1618
blogs.securiteam.com?author=28
exchange.xforce.ibmcloud.com/vulnerabilities/29009
support.avaya.com/elmodocs2/security/ASA-2006-069.htm
secunia.com/advisories/19238
us-cert.gov/cas/techalerts/TA06-073A.html
lists.grok.org.uk/pipermail/full-disclosure/2006-September/049540.html
osvdb.org/23903
trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_MDROPPER.BH
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
nvd.nist.gov/vuln/detail/CVE-2006-0009
github.com/advisories/GHSA-cg6j-ghhp-9v83