Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-1302
HistoryJul 13, 2006 - 9:05 p.m.

CVE-2006-1302

2006-07-1321:05:00
CWE-119
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.866 High

EPSS

Percentile

98.6%

JSON

Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka “Malformed SELECTION record Vulnerability.”

Affected configurations

NVD
Node
microsoftexcelMatch2000
OR
microsoftexcelMatch2000sp2
OR
microsoftexcelMatch2000sp3
OR
microsoftexcelMatch2000sr1
OR
microsoftexcelMatch2002
OR
microsoftexcelMatch2002sp1
OR
microsoftexcelMatch2002sp2
OR
microsoftexcelMatch2002sp3
OR
microsoftexcelMatch2003
OR
microsoftexcelMatch2003sp1
OR
microsoftexcelMatch2004mac_os_x
OR
microsoftexcelMatchxmac_os_x
OR
microsoftexcel_viewerMatch2003

Related

securityvulns 2
cve 2
cvelist 2
prion 2
nvd 1
nessus 2
checkpoint_advisories 1
securityvulns
securityvulns
[VulnWatch] NSFOCUS SA2006-05 : Microsoft Excel SELECTION Record Memory Corruption Vulnerability
2006-07-12 00:00:00
Microsoft Security Bulletin MS06-037 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)
2006-07-11 00:00:00
cve
cve
CVE-2006-1302
2006-07-13 21:05:00
CVE-2006-1301
2006-07-13 22:05:00
cvelist
cvelist
CVE-2006-1302
2006-07-13 21:00:00
CVE-2006-1301
2006-07-13 22:00:00
prion
prion
Buffer overflow
2006-07-13 21:05:00
Memory corruption
2006-07-13 22:05:00
nvd
nvd
CVE-2006-1301
2006-07-13 22:05:00
nessus
nessus
MS06-037: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)
2006-07-11 00:00:00
MS06-037 / MS06-038: Vulnerabilities in Microsoft Excel and Office Could Allow Remote Code Execution (917284 / 917285) (Mac OS X)
2006-07-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against Microsoft Excel Vulnerabilities (MS06-037)
2006-07-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.866 High

EPSS

Percentile

98.6%

JSON
Related for NVD:CVE-2006-1302
securityvulns2cve2cvelist2prion2nvd1nessus2checkpoint_advisories1