{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cUL\u003e    \u003cLI\u003eMicrosoft Word 2000 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2002 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word Viewer 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2004 pour Mac ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2004 v. X pour Mac ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Works 2004, 2005 et 2006 ;\u003c/LI\u003e    \u003cLI\u003eOpenOffice versions 2.x et ant\u00e9rieurs.\u003c/LI\u003e  \u003c/UL\u003e  \u003cP\u003eD\u0027autres applications pourraient \u00eatre affect\u00e9es par ces  vuln\u00e9rabilit\u00e9s.\u003c/P\u003e",
  "closed_at": "2007-02-14",
  "content": "## Description\n\n## 4.1 Alerte du 18 d\u00e9cembre 2006\n\nTrois vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Word et\naffectent \u00e9galement OpenOffice. Un utilisateur malintentionn\u00e9 peut, en\nincitant sa victime \u00e0 ouvrir un document au format Word (par exemple par\nl\u0027interm\u00e9diaire d\u0027un message \u00e9lectronique ou d\u0027un site web), provoquer\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance avec les privil\u00e8ges de\nl\u0027utilisateur.\n\nDeux codes malveillants exploitent actuellement ces vuln\u00e9rabilit\u00e9s et\nsont d\u00e9tect\u00e9s par certains antivirus (\u00e0 jour) sous les noms :\nTroj/DwnLdr-FXG, Troj/DwnLdr-FXH, TROJ_TINY_DU,\nTrojan_Downloader.Win32.Cryptic.ec, Trojan_Downloader.Win32.Cryptic.f,\netc.\n\nIl n\u0027existe pas de correctif officiel pour le moment.\n\n## 4.2 Mise \u00e0 jour du 26 janvier 2007\n\nLe 26 janvier 2007, Symantec fait \u00e9tat d\u0027un code malveillant exploitant\nune nouvelle vuln\u00e9rabilit\u00e9 non corrig\u00e9e pr\u00e9sente dans Microsoft Word\n2000 (cf. section Documentation). Ce code malveillant circule sur\nInternet sous forme de document Word. Il est identifi\u00e9 par Symantec sous\nle nom : Trojan.Mdropper.W.\n\nComme les pr\u00e9c\u00e9dente vuln\u00e9rabilit\u00e9s, il n\u0027existe \u00e0 ce jour pas de\ncorrectif officiel.\n\n## Contournement provisoire\n\n## 5.1 Utiliser un format de document alternatif\n\nLe CERTA recommande l\u0027utilisation d\u0027un format de document alternatif tel\nque le RTF.\n\n## 5.2 Utiliser un logiciel alternatif\n\nLe CERTA recommande d\u0027utiliser un outil de visualisation des documents\nau format Word alternatif \u00e0 jour (WordPad ou AbiWord).\n\n## 5.3 Mettre \u00e0 jour la base de signatures d\u0027antivirus\n\nCertains \u00e9diteurs d\u0027antivirus proposent d\u00e9j\u00e0 des mises \u00e0 jours de\nsignatures prenant en compte les codes malveillants sous sa forme\nactuelle. Il est cependant probable que des variantes apparaissent afin\nde contourner ces antivirus.\n\n## 5.4 Filtrer les pi\u00e8ces jointes au niveau des passerelles\n\nDans la mesure du possible, il est recommand\u00e9 de filtrer les fichiers au\nformat Word (extension .doc) au niveau des passerelles (messagerie, web\n...).\n\n## 5.5 N\u0027ouvrir que les documents provenant de sources de confiance\n\nA la reception d\u0027un document au format doc soit par le biais de la\nmessagerie \u00e9lectronique ou sur tout autre support, il est n\u00e9cessaire de\ns\u0027assurer de la provenance de ce fichier et de ne l\u0027ouvrir que si la\nsource est de confiance et apr\u00e8s analyse par un antivirus \u00e0 jour.\n\n## 5.6 Limiter l\u0027impact en utilisant un compte utilisateur sans privil\u00e8ge\n\nL\u0027utilisation de compte n\u0027ayant pas de droits d\u0027administration permet de\nlimiter l\u0027infection au contexte de l\u0027utilisateur.\n\n## Solution\n\nAppliquer les mises \u00e0 jours de l\u0027\u00e9diteur (cf. Documentation);\n",
  "cves": [
    {
      "name": "CVE-2006-6561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6561"
    },
    {
      "name": "CVE-2007-0515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0515"
    },
    {
      "name": "CVE-2006-5994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5994"
    },
    {
      "name": "CVE-2006-6456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6456"
    }
  ],
  "links": [
    {
      "title": "Avis du CERTA numero CERTA-2007-AVI-083 du 14 f\u00e9vrier 2007:",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2007-AVI-083/index.html"
    },
    {
      "title": "Bulletins de mise \u00e0 jour Microsoft MS07-014 et MS07-015 du    13 f\u00e9vrier 2007 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms07-015.mspx"
    },
    {
      "title": "Annonce du bloc-note de Symantec du 26 janvier 2007 :",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
    },
    {
      "title": "Annonce sur le bloc-notes Microsoft de la seconde    vuln\u00e9rabilit\u00e9, le 10 d\u00e9cembre 2006 :",
      "url": "http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx"
    },
    {
      "title": "Bulletins de mise \u00e0 jour Microsoft MS07-014 et MS07-015 du    13 f\u00e9vrier 2007 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms07-014.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft 932114 du 26 janvier 2007 :",
      "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
    }
  ],
  "reference": "CERTA-2006-ALE-014",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-12-06T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9 annonc\u00e9e par Microsoft.",
      "revision_date": "2006-12-12T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9, ajout des r\u00e9f\u00e9rences CVE.",
      "revision_date": "2006-12-15T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027affectation d\u0027OpenOffice.",
      "revision_date": "2006-12-18T00:00:00.000000"
    },
    {
      "description": "annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9 par Symantec.",
      "revision_date": "2007-01-26T00:00:00.000000"
    },
    {
      "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Microsoft et CVE.",
      "revision_date": "2007-01-30T00:00:00.000000"
    },
    {
      "description": "ajout du correctif.",
      "revision_date": "2007-02-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Des vuln\u00e9rabilit\u00e9s li\u00e9es aux documents de format Word permettent\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Microsoft Word",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft 929433",
      "url": "http://www.microsoft.com/technet/security/advisory/929433.mspx"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cUL\u003e    \u003cLI\u003eMicrosoft Word 2000 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2002 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word Viewer 2003 ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2004 pour Mac ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Word 2004 v. X pour Mac ;\u003c/LI\u003e    \u003cLI\u003eMicrosoft Works 2004, 2005 et 2006 ;\u003c/LI\u003e    \u003cLI\u003eOpenOffice versions 2.x et ant\u00e9rieurs.\u003c/LI\u003e  \u003c/UL\u003e  \u003cP\u003eD\u0027autres applications pourraient \u00eatre affect\u00e9es par ces  vuln\u00e9rabilit\u00e9s.\u003c/P\u003e",
  "closed_at": "2007-02-14",
  "content": "## Description\n\n## 4.1 Alerte du 18 d\u00e9cembre 2006\n\nTrois vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Word et\naffectent \u00e9galement OpenOffice. Un utilisateur malintentionn\u00e9 peut, en\nincitant sa victime \u00e0 ouvrir un document au format Word (par exemple par\nl\u0027interm\u00e9diaire d\u0027un message \u00e9lectronique ou d\u0027un site web), provoquer\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance avec les privil\u00e8ges de\nl\u0027utilisateur.\n\nDeux codes malveillants exploitent actuellement ces vuln\u00e9rabilit\u00e9s et\nsont d\u00e9tect\u00e9s par certains antivirus (\u00e0 jour) sous les noms :\nTroj/DwnLdr-FXG, Troj/DwnLdr-FXH, TROJ_TINY_DU,\nTrojan_Downloader.Win32.Cryptic.ec, Trojan_Downloader.Win32.Cryptic.f,\netc.\n\nIl n\u0027existe pas de correctif officiel pour le moment.\n\n## 4.2 Mise \u00e0 jour du 26 janvier 2007\n\nLe 26 janvier 2007, Symantec fait \u00e9tat d\u0027un code malveillant exploitant\nune nouvelle vuln\u00e9rabilit\u00e9 non corrig\u00e9e pr\u00e9sente dans Microsoft Word\n2000 (cf. section Documentation). Ce code malveillant circule sur\nInternet sous forme de document Word. Il est identifi\u00e9 par Symantec sous\nle nom : Trojan.Mdropper.W.\n\nComme les pr\u00e9c\u00e9dente vuln\u00e9rabilit\u00e9s, il n\u0027existe \u00e0 ce jour pas de\ncorrectif officiel.\n\n## Contournement provisoire\n\n## 5.1 Utiliser un format de document alternatif\n\nLe CERTA recommande l\u0027utilisation d\u0027un format de document alternatif tel\nque le RTF.\n\n## 5.2 Utiliser un logiciel alternatif\n\nLe CERTA recommande d\u0027utiliser un outil de visualisation des documents\nau format Word alternatif \u00e0 jour (WordPad ou AbiWord).\n\n## 5.3 Mettre \u00e0 jour la base de signatures d\u0027antivirus\n\nCertains \u00e9diteurs d\u0027antivirus proposent d\u00e9j\u00e0 des mises \u00e0 jours de\nsignatures prenant en compte les codes malveillants sous sa forme\nactuelle. Il est cependant probable que des variantes apparaissent afin\nde contourner ces antivirus.\n\n## 5.4 Filtrer les pi\u00e8ces jointes au niveau des passerelles\n\nDans la mesure du possible, il est recommand\u00e9 de filtrer les fichiers au\nformat Word (extension .doc) au niveau des passerelles (messagerie, web\n...).\n\n## 5.5 N\u0027ouvrir que les documents provenant de sources de confiance\n\nA la reception d\u0027un document au format doc soit par le biais de la\nmessagerie \u00e9lectronique ou sur tout autre support, il est n\u00e9cessaire de\ns\u0027assurer de la provenance de ce fichier et de ne l\u0027ouvrir que si la\nsource est de confiance et apr\u00e8s analyse par un antivirus \u00e0 jour.\n\n## 5.6 Limiter l\u0027impact en utilisant un compte utilisateur sans privil\u00e8ge\n\nL\u0027utilisation de compte n\u0027ayant pas de droits d\u0027administration permet de\nlimiter l\u0027infection au contexte de l\u0027utilisateur.\n\n## Solution\n\nAppliquer les mises \u00e0 jours de l\u0027\u00e9diteur (cf. Documentation);\n",
  "cves": [
    {
      "name": "CVE-2006-6561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6561"
    },
    {
      "name": "CVE-2007-0515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0515"
    },
    {
      "name": "CVE-2006-5994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5994"
    },
    {
      "name": "CVE-2006-6456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6456"
    }
  ],
  "links": [
    {
      "title": "Avis du CERTA numero CERTA-2007-AVI-083 du 14 f\u00e9vrier 2007:",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2007-AVI-083/index.html"
    },
    {
      "title": "Bulletins de mise \u00e0 jour Microsoft MS07-014 et MS07-015 du    13 f\u00e9vrier 2007 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms07-015.mspx"
    },
    {
      "title": "Annonce du bloc-note de Symantec du 26 janvier 2007 :",
      "url": "http://www.symantec.com/enterprise/security_response/weblog/2007/01/new_microsoft_word_2000_vulner.html"
    },
    {
      "title": "Annonce sur le bloc-notes Microsoft de la seconde    vuln\u00e9rabilit\u00e9, le 10 d\u00e9cembre 2006 :",
      "url": "http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx"
    },
    {
      "title": "Bulletins de mise \u00e0 jour Microsoft MS07-014 et MS07-015 du    13 f\u00e9vrier 2007 :",
      "url": "http://www.microsoft.com/technet/security/bulletin/ms07-014.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft 932114 du 26 janvier 2007 :",
      "url": "http://www.microsoft.com/technet/security/advisory/932114.mspx"
    }
  ],
  "reference": "CERTA-2006-ALE-014",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-12-06T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9 annonc\u00e9e par Microsoft.",
      "revision_date": "2006-12-12T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9, ajout des r\u00e9f\u00e9rences CVE.",
      "revision_date": "2006-12-15T00:00:00.000000"
    },
    {
      "description": "modifications li\u00e9es \u00e0 l\u0027affectation d\u0027OpenOffice.",
      "revision_date": "2006-12-18T00:00:00.000000"
    },
    {
      "description": "annonce d\u0027une nouvelle vuln\u00e9rabilit\u00e9 par Symantec.",
      "revision_date": "2007-01-26T00:00:00.000000"
    },
    {
      "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Microsoft et CVE.",
      "revision_date": "2007-01-30T00:00:00.000000"
    },
    {
      "description": "ajout du correctif.",
      "revision_date": "2007-02-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Des vuln\u00e9rabilit\u00e9s li\u00e9es aux documents de format Word permettent\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Microsoft Word",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft 929433",
      "url": "http://www.microsoft.com/technet/security/advisory/929433.mspx"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Visio 2002.",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Toutes versions de la suite Microsoft Office, \u00e0 l\u0027exception de Microsoft Office 2007 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Project versions 2000 et 2002 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Works Suite versions 2004, 2005 et 2006 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe nombreuses vuln\u00e9rabilit\u00e9s, dont certaines ayant d\u00e9j\u00e0 fait l\u0027objet\nd\u0027une alerte du CERTA (CERTA-2006-ALE-014, CERTA-2007-ALE-004), touchent\nles produits bureautiques de Microsoft. L\u0027exploitation de ces\nvuln\u00e9rabilit\u00e9s peut \u00eatre conduit depuis le syst\u00e8me vuln\u00e9rable et/ou \u00e0\ndistance, et permet l\u0027ex\u00e9ction de code arbitraire. Cette ex\u00e9cution de\ncode peut conduire \u00e0 l\u0027obtention du contr\u00f4le total de la machine\nvuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-0671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0671"
    },
    {
      "name": "CVE-2006-3877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3877"
    },
    {
      "name": "CVE-2006-5994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5994"
    },
    {
      "name": "CVE-2006-6456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6456"
    },
    {
      "name": "CVE-2007-0208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0208"
    },
    {
      "name": "CVE-2007-0209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0209"
    },
    {
      "name": "CVE-2006-6561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6561"
    },
    {
      "name": "CVE-2007-0515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0515"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-015 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-015.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-014 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-014.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-015 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/france/technet/security/bulletin/MS07-015.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-014 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/france/technet/security/bulletin/MS07-014.mspx"
    }
  ],
  "reference": "CERTA-2007-AVI-083",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-02-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s touchent les suites bureautique de\nMicrosoft. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s peut conduire \u00e0\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s de Microsoft Office",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS07-014 de Microsoft du 13 f\u00e9vrier 2007",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS07-015 de Microsoft du 13 f\u00e9vrier 2007",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Visio 2002.",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Toutes versions de la suite Microsoft Office, \u00e0 l\u0027exception de Microsoft Office 2007 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Project versions 2000 et 2002 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Works Suite versions 2004, 2005 et 2006 ;",
      "product": {
        "name": "Office",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nDe nombreuses vuln\u00e9rabilit\u00e9s, dont certaines ayant d\u00e9j\u00e0 fait l\u0027objet\nd\u0027une alerte du CERTA (CERTA-2006-ALE-014, CERTA-2007-ALE-004), touchent\nles produits bureautiques de Microsoft. L\u0027exploitation de ces\nvuln\u00e9rabilit\u00e9s peut \u00eatre conduit depuis le syst\u00e8me vuln\u00e9rable et/ou \u00e0\ndistance, et permet l\u0027ex\u00e9ction de code arbitraire. Cette ex\u00e9cution de\ncode peut conduire \u00e0 l\u0027obtention du contr\u00f4le total de la machine\nvuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-0671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0671"
    },
    {
      "name": "CVE-2006-3877",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-3877"
    },
    {
      "name": "CVE-2006-5994",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-5994"
    },
    {
      "name": "CVE-2006-6456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6456"
    },
    {
      "name": "CVE-2007-0208",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0208"
    },
    {
      "name": "CVE-2007-0209",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0209"
    },
    {
      "name": "CVE-2006-6561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-6561"
    },
    {
      "name": "CVE-2007-0515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0515"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-015 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-015.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-014 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-014.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-015 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/france/technet/security/bulletin/MS07-015.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-014 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/france/technet/security/bulletin/MS07-014.mspx"
    }
  ],
  "reference": "CERTA-2007-AVI-083",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-02-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s touchent les suites bureautique de\nMicrosoft. L\u0027exploitation de ces vuln\u00e9rabilit\u00e9s peut conduire \u00e0\nl\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s de Microsoft Office",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS07-014 de Microsoft du 13 f\u00e9vrier 2007",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS07-015 de Microsoft du 13 f\u00e9vrier 2007",
      "url": null
    }
  ]
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "4891122F-AD7F-45E6-98C6-833227916F6B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "07D3F3E4-93FB-481A-94D9-075E726697C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
              "matchCriteriaId": "9409A9BD-1E9B-49B8-884F-8FE569D8AA25",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
              "matchCriteriaId": "79BA1175-7F02-4435-AEA6-1BA8AADEB7EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
              "matchCriteriaId": "AEBFF713-0884-43BF-9AB8-777664FD64AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D90B1E1-23CD-4595-AD78-DA1758E9896D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
              "matchCriteriaId": "379C2A4A-78EF-473D-954B-F5DD76C3D6CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
              "matchCriteriaId": "1889A686-9565-4958-99BB-2EC24ABDF272",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
              "matchCriteriaId": "F98B6FDD-E9AA-49A4-8D9C-422DF5520A66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB8E7A05-97EE-40A4-A410-B2DE582AA381",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C180D46-EEFE-416B-AB4D-A7EF0B749105",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en Microsoft Word 2000, 2002, y Word Viewer 2003 permite a atacantes remotos con la intervenci\u00f3n del usuario, ejecutar c\u00f3digo de su elecci\u00f3n mediante un fichero DOC manipulado que dispara una corrupci\u00f3n de memoria, como se demuestra con el fichero 12122006-djtest.doc, vulnerabilidad diferente a CVE-2006-5994 y CVE-2006-6456."
    }
  ],
  "id": "CVE-2006-6561",
  "lastModified": "2026-06-16T22:33:22.503",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2006-12-14T18:28:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://blogs.securiteam.com/?p=763"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://research.eeye.com/html/alerts/zeroday/20061212.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1017390"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.infoworld.com/article/06/12/13/HNthirdword_1.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/996892"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.milw0rm.com/sploits/12122006-djtest.doc"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/archive/1/454219/30/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/21589"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/4997"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30885"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A332"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://blogs.securiteam.com/?p=763"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://research.eeye.com/html/alerts/zeroday/20061212.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1017390"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.infoworld.com/article/06/12/13/HNthirdword_1.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/996892"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.milw0rm.com/sploits/12122006-djtest.doc"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/archive/1/454219/30/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.securityfocus.com/bid/21589"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2006/4997"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30885"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A332"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2006-6561"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-12-14T18:28:00Z",
    "severity": "HIGH"
  },
  "details": "Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.",
  "id": "GHSA-q2rf-7vjv-wx6h",
  "modified": "2022-05-01T07:39:19Z",
  "published": "2022-05-01T07:39:19Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-6561"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30885"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A332"
    },
    {
      "type": "WEB",
      "url": "http://blogs.securiteam.com/?p=763"
    },
    {
      "type": "WEB",
      "url": "http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx"
    },
    {
      "type": "WEB",
      "url": "http://research.eeye.com/html/alerts/zeroday/20061212.html"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1017390"
    },
    {
      "type": "WEB",
      "url": "http://www.infoworld.com/article/06/12/13/HNthirdword_1.html"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/996892"
    },
    {
      "type": "WEB",
      "url": "http://www.milw0rm.com/sploits/12122006-djtest.doc"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/454219/30/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/21589"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/4997"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2006-6561",
    "description": "Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.",
    "id": "GSD-2006-6561",
    "references": [
      "https://www.suse.com/security/cve/CVE-2006-6561.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-6561"
      ],
      "details": "Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456.",
      "id": "GSD-2006-6561",
      "modified": "2023-12-13T01:19:54.042058Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2006-6561",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "21589",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/21589"
          },
          {
            "name": "http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx",
            "refsource": "CONFIRM",
            "url": "http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx"
          },
          {
            "name": "1017390",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1017390"
          },
          {
            "name": "http://www.infoworld.com/article/06/12/13/HNthirdword_1.html",
            "refsource": "MISC",
            "url": "http://www.infoworld.com/article/06/12/13/HNthirdword_1.html"
          },
          {
            "name": "http://www.milw0rm.com/sploits/12122006-djtest.doc",
            "refsource": "MISC",
            "url": "http://www.milw0rm.com/sploits/12122006-djtest.doc"
          },
          {
            "name": "20061212 Re: Re: The newest Word flaw is due to malformed data structure handling",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/454219/30/0/threaded"
          },
          {
            "name": "http://research.eeye.com/html/alerts/zeroday/20061212.html",
            "refsource": "MISC",
            "url": "http://research.eeye.com/html/alerts/zeroday/20061212.html"
          },
          {
            "name": "VU#996892",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/996892"
          },
          {
            "name": "ADV-2006-4997",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/4997"
          },
          {
            "name": "http://blogs.securiteam.com/?p=763",
            "refsource": "MISC",
            "url": "http://blogs.securiteam.com/?p=763"
          },
          {
            "name": "word-pointer-code-execution(30885)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30885"
          },
          {
            "name": "oval:org.mitre.oval:def:332",
            "refsource": "OVAL",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A332"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:works:2005:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:works:2006:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-6561"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20061212 Re: Re: The newest Word flaw is due to malformed data structure handling",
              "refsource": "BUGTRAQ",
              "tags": [
                "Exploit"
              ],
              "url": "http://www.securityfocus.com/archive/1/454219/30/0/threaded"
            },
            {
              "name": "http://research.eeye.com/html/alerts/zeroday/20061212.html",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://research.eeye.com/html/alerts/zeroday/20061212.html"
            },
            {
              "name": "http://www.infoworld.com/article/06/12/13/HNthirdword_1.html",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.infoworld.com/article/06/12/13/HNthirdword_1.html"
            },
            {
              "name": "http://www.milw0rm.com/sploits/12122006-djtest.doc",
              "refsource": "MISC",
              "tags": [
                "Exploit"
              ],
              "url": "http://www.milw0rm.com/sploits/12122006-djtest.doc"
            },
            {
              "name": "VU#996892",
              "refsource": "CERT-VN",
              "tags": [
                "Third Party Advisory",
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/996892"
            },
            {
              "name": "21589",
              "refsource": "BID",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.securityfocus.com/bid/21589"
            },
            {
              "name": "http://blogs.securiteam.com/?p=763",
              "refsource": "MISC",
              "tags": [],
              "url": "http://blogs.securiteam.com/?p=763"
            },
            {
              "name": "http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx"
            },
            {
              "name": "1017390",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1017390"
            },
            {
              "name": "ADV-2006-4997",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/4997"
            },
            {
              "name": "word-pointer-code-execution(30885)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30885"
            },
            {
              "name": "oval:org.mitre.oval:def:332",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A332"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": true
        }
      },
      "lastModifiedDate": "2018-05-03T01:29Z",
      "publishedDate": "2006-12-14T18:28Z"
    }
  }
}