CVE-2006-1306 Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a functio...
HighCVSS 9.3
EPSS 9.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2000 | No fix listed |
| Microsoft excel | = 2000-sp2 | No fix listed |
| Microsoft excel | = 2000-sp3 | No fix listed |
| Microsoft excel | = 2000-sr1 | No fix listed |
| Microsoft excel | = 2002 | No fix listed |
| Microsoft excel | = 2002-sp1 | No fix listed |
| Microsoft excel | = 2002-sp2 | No fix listed |
| Microsoft excel | = 2002-sp3 | No fix listed |
| Microsoft excel | = 2003 | No fix listed |
| Microsoft excel | = 2003-sp1 | No fix listed |
| Microsoft excel | = 2004 | No fix listed |
| Microsoft excel | = x | No fix listed |
| Microsoft excel viewer | = 2003 | No fix listed |
References
- 1016472 vdb-entry
- secway.org vendor-advisory
- 20060712 Microsoft Excel Array Index Error Remote Code Execution mailing-list
- 18886 patch vdb-entry
- ADV-2006-2755 vdb-entry vendor-advisory
- MS06-037 vendor-advisory
- oval:org.mitre.oval:def:950 signature vdb-entry