Lucene search

K
nvd[email protected]NVD:CVE-2006-1301
HistoryJul 13, 2006 - 10:05 p.m.

CVE-2006-1301

2006-07-1322:05:00
CWE-94
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.895 High

EPSS

Percentile

98.8%

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302.

Affected configurations

NVD
Node
microsoftexcelMatch2000
OR
microsoftexcelMatch2000sp2
OR
microsoftexcelMatch2000sp3
OR
microsoftexcelMatch2000sr1
OR
microsoftexcelMatch2002
OR
microsoftexcelMatch2002sp1
OR
microsoftexcelMatch2002sp2
OR
microsoftexcelMatch2002sp3
OR
microsoftexcelMatch2003
OR
microsoftexcelMatch2003sp1
OR
microsoftexcelMatch2004mac_os_x
OR
microsoftexcelMatchxmac_os_x
OR
microsoftexcel_viewerMatch2003

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.895 High

EPSS

Percentile

98.8%