CVE-2006-0031

2006-03-1423:02:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2006-0031

stack-based buffer overflow

microsoft excel

microsoft office

arbitrary code execution

nvd

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.43 Medium

EPSS

Percentile

97.4%

JSON

Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.

Affected configurations

NVD

Node

microsoftofficeMatch2000sp3

microsoftofficeMatch2003sp1

microsoftofficeMatch2003sp2

microsoftofficeMatch2004mac

microsoftofficeMatchv.xmac

microsoftofficeMatchxpsp3

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2000
microsoft:officemicrosoft officeeq2003
microsoft:officemicrosoft officeeq2004
microsoft:officemicrosoft officeeqv.x
microsoft:officemicrosoft officeeqxp

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2000
microsoft:office	microsoft office	eq	2003
microsoft:office	microsoft office	eq	2004
microsoft:office	microsoft office	eq	v.x
microsoft:office	microsoft office	eq	xp