Back to CVE Browser

CVE-2006-1311

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.0550%

EPSS Percentile8.65th

PublishedFeb 13, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption.

Affected Platforms (CPE)

📦

Microsoft

Learning Essentials

= 1.0

📦

Microsoft

Learning Essentials

= 1.1

📦

Microsoft

Learning Essentials

= 1.5

📦

Microsoft

Office

All versions

📦

Microsoft

Office

= 2000

📦

Microsoft

Office

= 2003

📦

Microsoft

Office

= xp

💻

Microsoft

Windows 2000

All versions

💻

Microsoft

Windows 2003 Server

= sp1

💻

Microsoft

Windows Xp

All versions

References & Advisories

🔗 http://secunia.com/advisories/24152

🔗 http://www.kb.cert.org/vuls/id/368132

🔗 http://www.osvdb.org/31886

🔗 http://www.securityfocus.com/bid/21876

🔗 http://www.securitytracker.com/id?1017640

🔗 http://www.securitytracker.com/id?1017641

🔗 http://www.us-cert.gov/cas/techalerts/TA07-044A.html

🔗 http://www.vupen.com/english/advisories/2007/0582

Related Vulnerabilities

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...

CVE-2026-121895.3

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzm...

CVE-2026-121886.3

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules...