CVE-2006-1311

Current Description

The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption.

Basic Data

Published	February 13, 2007
Last Modified	October 12, 2018
Assigner	cve@mitre.org
Data Type	CVE
Data Format	MITRE
Data Version	4.0
Problem Type	NVD-CWE-Other
CVE Data Version	4.0

Base Metric V2

CVSS 2 - Version	2.0
CVSS 2 - Vector String	AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS 2 - Access Vector	NETWORK
CVSS 2 - Access Complexity	MEDIUM
CVSS 2 - Authentication	NONE
CVSS 2 - Confidentiality Impact	COMPLETE
CVSS 2 - Availability Impact	COMPLETE
CVSS 2 - Base Score	9.3
Severity	HIGH
Exploitability Score	8.6
Impact Score	10.0
Obtain All Privilege	true
Obtain User Privilege	false
Obtain Other Privilege	false

Base Metric V3

No data provided.

Configurations

OR - Configuration 1

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	Application	Microsoft	Learning Essentials	1.0	*	*	*	*	*	*	*
2.3	Application	Microsoft	Learning Essentials	1.1	*	*	*	*	*	*	*
2.3	Application	Microsoft	Learning Essentials	1.5	*	*	*	*	*	*	*
2.3	Application	Microsoft	Office	*	*	*	*	*	*	*	*
2.3	Application	Microsoft	Office	2000	sp3	*	*	*	*	*	*
2.3	Application	Microsoft	Office	2003	sp2	*	*	*	*	*	*
2.3	Application	Microsoft	Office	xp	sp3	*	*	*	*	*	*

OR - Configuration 2

Cpe Version	Part	Vendor	Product	Version	Update	Edition	Language	SW Edition	Target SW	Target HW	Other
2.3	OS	Microsoft	Windows 2000	*	sp4	*	fr	*	*	*	*
2.3	OS	Microsoft	Windows 2003 Server	sp1	*	*	*	*	*	*	*
2.3	OS	Microsoft	Windows Xp	*	sp2	tablet_pc	*	*	*	*	*

Vulnerable Software List

Vendor	Product	Versions
Microsoft	Windows Xp	*
Microsoft	Office	*, 2000, 2003, xp
Microsoft	Learning Essentials	1.0, 1.1, 1.5
Microsoft	Windows 2000	*
Microsoft	Windows 2003 Server	sp1

References

Name	Source	URL	Tags
24152	http://secunia.com/advisories/24152	SECUNIA
VU#368132	http://www.kb.cert.org/vuls/id/368132	CERT-VN	US Government Resource
31886	http://www.osvdb.org/31886	OSVDB
21876	http://www.securityfocus.com/bid/21876	BID
1017640	http://www.securitytracker.com/id?1017640	SECTRACK
1017641	http://www.securitytracker.com/id?1017641	SECTRACK
TA07-044A	http://www.us-cert.gov/cas/techalerts/TA07-044A.html	CERT	US Government Resource
ADV-2007-0582	http://www.vupen.com/english/advisories/2007/0582	VUPEN
MS07-013	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-013	MS
ms-richedit-code-execution(30592)	https://exchange.xforce.ibmcloud.com/vulnerabilities/30592	XF
oval:org.mitre.oval:def:1090	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1090	OVAL