CVE-2006-1302 Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory c...
HighCVSS 9.3
EPSS 13.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2000 | No fix listed |
| Microsoft excel | = 2000-sp2 | No fix listed |
| Microsoft excel | = 2000-sp3 | No fix listed |
| Microsoft excel | = 2000-sr1 | No fix listed |
| Microsoft excel | = 2002 | No fix listed |
| Microsoft excel | = 2002-sp1 | No fix listed |
| Microsoft excel | = 2002-sp2 | No fix listed |
| Microsoft excel | = 2002-sp3 | No fix listed |
| Microsoft excel | = 2003 | No fix listed |
| Microsoft excel | = 2003-sp1 | No fix listed |
| Microsoft excel | = 2004 | No fix listed |
| Microsoft excel | = x | No fix listed |
| Microsoft excel viewer | = 2003 | No fix listed |
References
- 1238 third-party-advisory
- 1016472 vdb-entry
- www.nsfocus.com vendor-advisory
- 20060712 NSFOCUS SA2006-05 : Microsoft Excel SELECTION Record Memory Corruption Vulnerability mailing-list
- 18885 patch vdb-entry
- ADV-2006-2755 vdb-entry
- MS06-037 vendor-advisory
- oval:org.mitre.oval:def:379 signature vdb-entry