CVE-2006-3647: Microsoft Office

High severity, CVSS 9.3. EPSS: 27% chance of exploitation in the next 30 days.

Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.

Affected products

• Microsoft Office: version 2000 only; version 2001 only; version 2003 only; version 2004 only; version v.x only

Published 2006-10-10. Last modified 2026-06-16.