CVE-2006-3493

CVE-2006-3493 describes a buffer overflow vulnerability in the LsCreateLine function within mso.dll and mso9.dll, affecting Microsoft Office 2000, 2002, and 2003. This flaw allows remote, user-assisted attackers to trigger a denial of service (application crash) by opening a specially crafted Word DOC or other Office file. While initially thought to enable code execution, Microsoft and the original researcher confirmed it only leads to a crash. The vulnerability has a CVSS score of 5.1, indicating a medium severity. Its attack vector is network-based, but requires high attack complexity due to user interaction, and its potential impact is limited to availability (denial of service). The FAUCET Risk Score is 98/100, suggesting a high theoretical risk despite the limited impact. There is no evidence of active exploitation, and it is not listed in CISA's KEV catalog. While an ExploitDB entry exists for an "Unchecked Boundary Condition" in Word 2000/2003, there are no Metasploit or Nuclei modules. Community discussion and media coverage for this CVE are minimal, which is typical for the vast majority of vulnerabilities.