Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2006-1309
HistoryJul 13, 2006 - 10:05 p.m.

CVE-2006-1309

2006-07-1322:05:00
CWE-94
microsoft
web.nvd.nist.gov
27
microsoft
excel
2000
2004
.xls
crafted label
memory corruption
cve-2006-1309
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.895

Percentile

98.8%

JSON

Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption.

Affected configurations

Nvd
Node
microsoftexcelMatch2000
OR
microsoftexcelMatch2000sp2
OR
microsoftexcelMatch2000sp3
OR
microsoftexcelMatch2000sr1
OR
microsoftexcelMatch2002
OR
microsoftexcelMatch2002sp1
OR
microsoftexcelMatch2002sp2
OR
microsoftexcelMatch2002sp3
OR
microsoftexcelMatch2003
OR
microsoftexcelMatch2003sp1
OR
microsoftexcelMatch2004mac_os_x
OR
microsoftexcelMatchxmac_os_x
OR
microsoftexcel_viewerMatch2003
VendorProductVersionCPE
microsoftexcel2000cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*
microsoftexcel2000cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*
microsoftexcel2000cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*
microsoftexcel2000cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*
microsoftexcel2002cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*
microsoftexcel2002cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*
microsoftexcel2002cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*
microsoftexcel2002cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*
microsoftexcel2003cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*
microsoftexcel2003cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*
Rows per page:
1-10 of 131

Related

cvelist 1
prion 1
nvd 1
checkpoint_advisories 1
securityvulns 1
nessus 2
cvelist
cvelist
CVE-2006-1309
2006-07-13 22:00:00
prion
prion
Memory corruption
2006-07-13 22:05:00
nvd
nvd
CVE-2006-1309
2006-07-13 22:05:00
checkpoint_advisories
checkpoint_advisories
Update Protection against Microsoft Excel Vulnerabilities (MS06-037)
2006-07-11 00:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS06-037 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)
2006-07-11 00:00:00
nessus
nessus
MS06-037: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)
2006-07-11 00:00:00
MS06-037 / MS06-038: Vulnerabilities in Microsoft Excel and Office Could Allow Remote Code Execution (917284 / 917285) (Mac OS X)
2006-07-11 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.895

Percentile

98.8%

JSON
Related for CVE-2006-1309
cvelist1prion1nvd1checkpoint_advisories1securityvulns1nessus2