CVE-2006-1540: MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause...

Security readout for executives and security teams

This is an old Microsoft Office file-parsing flaw. A victim would need to open a malicious Office document. Successful exploitation could crash Office or run attacker-controlled code, so remaining legacy Office 2000, Office XP, or Office 2003 installations are the main business concern. Exposure is most likely in unmanaged endpoints, archived virtual desktops, lab systems, or business processes that still open Office 2000, Office XP, or Office 2003 documents. Treat this as high priority only where legacy Office remains in use. Modern estates without Office 2000, XP, or 2003 exposure should document non-applicability rather than spend response time. Mitigation focus: Apply Microsoft MS06-038 guidance to any affected Office installation.; Retire or isolate Office 2000, Office XP, and Office 2003 systems.; Restrict opening untrusted legacy Office documents on affected hosts..

Prepared

Jun 29, 2026, 13:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.