CVE-2006-3877
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003,...
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
Exploit likelihood
What each source reports
NVD Score used
9.3
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
- Record
CVE-2006-3877- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
- Record
CVE-2006-3877- Updated
- 2026-11-02
EUVDEUVD-2006-3871 No score
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
- Record
EUVD-2006-3871- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j86v-2r4w-rjjr No score
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003,...
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
- Record
GHSA-j86v-2r4w-rjjr- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
- microsoft office
- microsoft powerpoint
- microsoft access
- microsoft excel
- microsoft excel viewer
- microsoft frontpage
- microsoft infopath
- microsoft onenote
- microsoft outlook
- microsoft project
- microsoft publisher
- microsoft visio
Show 2 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3877 is a high vulnerability (CVSS 9.3) in Microsoft Office, published October 10, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.4%, the 96th percentile. No source names a fixed version.
References
securityfocus.com/bid/20325
securityfocus.com/archive/1/449179/100/0/threaded
kb.cert.org/vuls/id/205948
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A568
us-cert.gov/cas/techalerts/TA07-044A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015
Show 7 moreShow less
vupen.com/english/advisories/2006/3977
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A220
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058
osvdb.org/29448
securitytracker.com/id?1017030
nvd.nist.gov/vuln/detail/CVE-2006-3877
github.com/advisories/GHSA-j86v-2r4w-rjjr