CVE-2006-1311: The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 S...

Security readout for executives and security teams

A crafted RTF document containing a malformed OLE object can corrupt Microsoft RichEdit memory and run attacker-controlled code if opened by a user. This mainly matters for legacy Windows, Office, and Learning Essentials deployments named in MS07-013. It is user-assisted, but successful exploitation could compromise the affected user’s workstation. Exposure is most likely in organizations retaining the listed legacy Microsoft Windows, Office, Office for Mac, or Learning Essentials versions, especially where users can receive or open RTF documents from email, web downloads, or shared file stores. Prioritize remediation where legacy Microsoft Office or Windows systems remain in business workflows. The issue enables code execution from a document lure, which can support initial compromise, but urgency is lower where affected products have been fully retired. Mitigation focus: Apply Microsoft’s MS07-013 security updates where the affected software remains in use.; Retire or isolate unsupported legacy Windows and Office versions listed in the advisory.; Restrict untrusted RTF/OLE document handling until vendor guidance is verified..

Prepared

Jun 29, 2026, 07:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.