Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-06-22. Apply updates per vendor instructions.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 2 products
CVE-2006-2492. Status: ✅ Confirmed exploited in the wild Date added: 2022-06-08 Required action: Apply updates per vendor instructions. Due date: 2022-06-22
Post summary
CVE-2006-2492 is confirmed to be exploited in the wild, with vendor-specified updates required as mitigation.
https://research.lyrie.ai/research/active-exploit-cve-2006-2492-word #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The article URL indicates it discusses an active exploit for CVE‑2006-2492, but no further details are provided in the text.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | office | 2000 | - | - |
| App | microsoft | office | 2003 | - | - |
| App | microsoft | office | 2003 | - | - |
| App | microsoft | office | xp | - | - |
| App | microsoft | works_suite | - | - | - |