MALICIOUS
60
Risk Score
Malware Insights
MITRE ATT&CK
T1203 Exploitation for Client Execution
The sample is a Microsoft Word document that triggers a critical heuristic for CVE-2006-6456, indicating exploitation of a malformed table SPRM vulnerability. This vulnerability allows for arbitrary code execution within the context of the application. No document body or scripts were extracted, limiting further analysis of the payload.
Heuristics 1
-
CVE-2006-6456 — Microsoft Word malformed table SPRM critical CVE exact CVE_2006_6456WordDocument contains a malformed table border-color SPRM in the CVE-2006-6456 shape: a valid table-SPRM cluster is followed by an invalid high-byte 0xFF SPRM where Word expects a normal sprmTBrc*Cv record. Vulnerable Word 2000/2002/2003 parsers corrupt memory while handling this malformed data structure.
Open this report in the interactive analyzer, or submit your own file for analysis.