Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-1306
HistoryJul 13, 2006 - 9:05 p.m.

CVE-2006-1306

2006-07-1321:05:00
CWE-94
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.879 High

EPSS

Percentile

98.7%

JSON

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka “Malformed OBJECT record Vulnerability.”

Affected configurations

NVD
Node
microsoftexcelMatch2000
OR
microsoftexcelMatch2000sp2
OR
microsoftexcelMatch2000sp3
OR
microsoftexcelMatch2000sr1
OR
microsoftexcelMatch2002
OR
microsoftexcelMatch2002sp1
OR
microsoftexcelMatch2002sp2
OR
microsoftexcelMatch2002sp3
OR
microsoftexcelMatch2003
OR
microsoftexcelMatch2003sp1
OR
microsoftexcelMatch2004mac_os_x
OR
microsoftexcelMatchxmac_os_x
OR
microsoftexcel_viewerMatch2003

Related

securityvulns 2
prion 1
cve 1
checkpoint_advisories 2
cvelist 1
nessus 2
securityvulns
securityvulns
[Full-disclosure] Microsoft Excel Array Index Error Remote Code Execution
2006-07-12 00:00:00
Microsoft Security Bulletin MS06-037 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)
2006-07-11 00:00:00
prion
prion
Design/Logic Flaw
2006-07-13 21:05:00
cve
cve
CVE-2006-1306
2006-07-13 21:05:00
checkpoint_advisories
checkpoint_advisories
Microsoft Excel Malformed OBJECT Record Code Execution (MS06-037; CVE-2006-1306)
2010-02-22 00:00:00
Update Protection against Microsoft Excel Vulnerabilities (MS06-037)
2006-07-11 00:00:00
cvelist
cvelist
CVE-2006-1306
2006-07-13 21:00:00
nessus
nessus
MS06-037: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)
2006-07-11 00:00:00
MS06-037 / MS06-038: Vulnerabilities in Microsoft Excel and Office Could Allow Remote Code Execution (917284 / 917285) (Mac OS X)
2006-07-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.879 High

EPSS

Percentile

98.7%

JSON
Related for NVD:CVE-2006-1306
securityvulns2prion1cve1checkpoint_advisories2cvelist1nessus2