CVE-2006-3650: Microsoft Office

High severity, CVSS 9.3. EPSS: 38.5% chance of exploitation in the next 30 days.

Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.

Affected products

• Microsoft Office: version 2000 only; version 2001 only; version 2003 only; version 2004 only; version v.x only

Published 2006-10-10. Last modified 2026-06-16.