CVE-2006-2387

2006-10-1022:07:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2006-2387

microsoft excel

excel 2000

excel 2002

excel 2003

excel 2004 for mac

excel viewer 2003

microsoft works suite 2004

microsoft works suite 2005

microsoft works suite 2006

user-assisted attackers

arbitrary code

crafted datetime record

xls file

vulnerability

7.1 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.703 High

EPSS

Percentile

98.0%

JSON

Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2003
microsoft:officemicrosoft officeeq2001
microsoft:officemicrosoft officeeq2004
microsoft:officemicrosoft officeeq2000
microsoft:officemicrosoft officeeqv.x

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2003
microsoft:office	microsoft office	eq	2001
microsoft:office	microsoft office	eq	2004
microsoft:office	microsoft office	eq	2000
microsoft:office	microsoft office	eq	v.x