Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2006-1311: RichEdit in Windows/Office may run malicious code

CVE-2006-1311 · published 19 years ago

Summary

The RichEdit text component in certain Windows (2000, XP, 2003) and Office versions can be tricked into running unwanted code when it opens a specially crafted RTF document. This could let an attacker take control of the computer. Install the latest security updates from Microsoft and avoid opening RTF files from unknown sources.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
microsoft	learning_essentials	1.0 1.1 1.5 `cpe:2.3:a:microsoft:learning_essentials:1.0:::::::*`
microsoft	office	2000 2003 xp `cpe:2.3:a:microsoft:office::::::::`
microsoft	windows_2000	All versions `cpe:2.3:o:microsoft:windows_2000::sp4::fr::::`
microsoft	windows_2003_server	sp1 `cpe:2.3:o:microsoft:windows_2003_server:sp1:::::::*`
microsoft	windows_xp	All versions `cpe:2.3:o:microsoft:windows_xp::sp2:tablet_pc:::::`

Original advisory text

The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

9.3 Critical

Exploitation

31% chance of attack within 30 days

Timeline

Published13 Feb 2007

Updated29 Sep 2026

First seen29 Sep 2026

Sources

CVE-2006-1311 · NVD

Track software like this

Free during beta