CVE-2006-5994: Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and...

Security readout for executives and security teams

This is an old Microsoft Word remote code execution flaw. A malicious Word document containing a malformed string can corrupt memory and potentially run attacker-controlled code. Business risk is concentrated in legacy Office and Works installations that can still open untrusted documents. Exposure is most likely on endpoints retaining Word 2000, Word 2002, Office Word or Word Viewer 2003, Word for Mac 2004/v.X, or Works 2004-2006. Modern environments are mainly at risk through unmanaged legacy systems, archives, or isolated business applications requiring old Office versions. Prioritize if any legacy Office or Works software remains in production. For fully modernized Office estates, urgency is lower, but confirm with inventory because obsolete document-handling software often persists outside standard patch programs. Mitigation focus: Apply Microsoft guidance from MS07-014 where these legacy products remain in use.; Remove or upgrade unsupported Word, Word Viewer, and Works installations.; Restrict opening of untrusted Word documents on legacy systems..

Prepared

Jun 29, 2026, 08:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.