CVE-2006-0009: Microsoft Office

Medium severity, CVSS 5.1. EPSS: 14.2% chance of exploitation in the next 30 days.

Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.

Affected products

• Microsoft Office: version 2000 only; version 2003 only; version 2004 only; version v.x only; version xp only
• Microsoft Works: version 2000 only; version 2001 only; version 2002 only; version 2003 only; version 2004 only; version 2005 only; …

Published 2006-03-14. Last modified 2026-06-16.