Buffer Overflow Vulnerability in Microsoft Office Products

CVE-2006-3649

Summary

This vulnerability arises from a buffer overflow in the Microsoft Visual Basic for Applications (VBA) SDK, specifically in versions 6.0 through 6.4. It affects multiple Microsoft Office products, allowing user-assisted attackers to exploit unspecified document properties when VBA opens documents. If successfully exploited, this flaw enables attackers to execute arbitrary code, potentially compromising the affected system. Users are advised to exercise caution when opening documents from untrusted sources, especially those known to utilize VBA.

References