CVE-2006-6456
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows...
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
- Record
CVE-2006-6456- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
- Record
CVE-2006-6456- Updated
- 2026-11-02
EUVDEUVD-2006-6439 No score
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
- Record
EUVD-2006-6439- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r6v9-c7q3-4rcq No score
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows...
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994.
- Record
GHSA-r6v9-c7q3-4rcq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-6456 is a high vulnerability (CVSS 9.3) in Microsoft Word, published December 11, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 33.9%, the 98th percentile. No source names a fixed version.
References
archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A746
securitytracker.com/id?1017579
vil.mcafeesecurity.com/vil/content/v_vul27249.htm
secunia.com/advisories/23205
isc.sans.org/diary.php?storyid=1925
Show 17 moreShow less
securityfocus.com/archive/1/454069/100/0/threaded
vupen.com/english/advisories/2007/0435
osvdb.org/30825
us-cert.gov/cas/techalerts/TA07-044A.html
exchange.xforce.ibmcloud.com/vulnerabilities/30806
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014
kb.cert.org/vuls/id/166700
blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx
nvd.nist.gov/vuln/detail/CVE-2006-6456
github.com/advisories/GHSA-r6v9-c7q3-4rcq