CVE-2006-1302

2006-07-1321:05:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2006-1302

buffer overflow

microsoft excel

user-assisted

arbitrary code

memory corruption

malformed selection record vulnerability

nvd

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.883 High

EPSS

Percentile

98.7%

JSON

Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka “Malformed SELECTION record Vulnerability.”

CPENameOperatorVersion
microsoft:excelmicrosoft exceleqx
microsoft:excelmicrosoft exceleq2002
microsoft:excelmicrosoft exceleq2003
microsoft:excelmicrosoft exceleq2000
microsoft:excel_viewermicrosoft excel viewereq2003
microsoft:excelmicrosoft exceleq2004

CPE	Name	Operator	Version
microsoft:excel	microsoft excel	eq	x
microsoft:excel	microsoft excel	eq	2002
microsoft:excel	microsoft excel	eq	2003
microsoft:excel	microsoft excel	eq	2000
microsoft:excel_viewer	microsoft excel viewer	eq	2003
microsoft:excel	microsoft excel	eq	2004