CVE-2006-1304

2006-07-1321:05:00

CWE-94

[email protected]

web.nvd.nist.gov

microsoft excel

buffer overflow

cve-2006-1304

security vulnerability

nvd

7.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.878 High

EPSS

Percentile

98.7%

JSON

Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a “data filling operation.”

CPENameOperatorVersion
microsoft:excelmicrosoft exceleqx
microsoft:excelmicrosoft exceleq2002
microsoft:excelmicrosoft exceleq2003
microsoft:excelmicrosoft exceleq2000
microsoft:excel_viewermicrosoft excel viewereq2003

CPE	Name	Operator	Version
microsoft:excel	microsoft excel	eq	x
microsoft:excel	microsoft excel	eq	2002
microsoft:excel	microsoft excel	eq	2003
microsoft:excel	microsoft excel	eq	2000
microsoft:excel_viewer	microsoft excel viewer	eq	2003