Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-1309
HistoryJul 13, 2006 - 10:05 p.m.

CVE-2006-1309

2006-07-1322:05:00
CWE-94
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.895 High

EPSS

Percentile

98.8%

JSON

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption.

Affected configurations

NVD
Node
microsoftexcelMatch2000
OR
microsoftexcelMatch2000sp2
OR
microsoftexcelMatch2000sp3
OR
microsoftexcelMatch2000sr1
OR
microsoftexcelMatch2002
OR
microsoftexcelMatch2002sp1
OR
microsoftexcelMatch2002sp2
OR
microsoftexcelMatch2002sp3
OR
microsoftexcelMatch2003
OR
microsoftexcelMatch2003sp1
OR
microsoftexcelMatch2004mac_os_x
OR
microsoftexcelMatchxmac_os_x
OR
microsoftexcel_viewerMatch2003

Related

cvelist 1
prion 1
cve 1
checkpoint_advisories 1
nessus 2
securityvulns 1
cvelist
cvelist
CVE-2006-1309
2006-07-13 22:00:00
prion
prion
Memory corruption
2006-07-13 22:05:00
cve
cve
CVE-2006-1309
2006-07-13 22:05:00
checkpoint_advisories
checkpoint_advisories
Update Protection against Microsoft Excel Vulnerabilities (MS06-037)
2006-07-11 00:00:00
nessus
nessus
MS06-037: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)
2006-07-11 00:00:00
MS06-037 / MS06-038: Vulnerabilities in Microsoft Excel and Office Could Allow Remote Code Execution (917284 / 917285) (Mac OS X)
2006-07-11 00:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS06-037 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)
2006-07-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.895 High

EPSS

Percentile

98.8%

JSON
Related for NVD:CVE-2006-1309
cvelist1prion1cve1checkpoint_advisories1nessus2securityvulns1