CVE-2006-0028

Published: Mar 14, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.

Affected (11)

Products: Microsoft: Excel, Office

2 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Version 2000
Microsoft Excel	Version 2002
Microsoft Excel	Version 2003
Microsoft Excel	Version 2004
Microsoft Excel	Version x
Microsoft Office	Version 2000 sp3
Microsoft Office	Version 2003 sp1
Microsoft Office	Version 2003 sp2
Microsoft Office	Version 2004
Microsoft Office	Version v.x
Microsoft Office	Version xp sp3

References (34)

http://secunia.com/advisories/19138

Source: secure@microsoft.com

PatchVendor Advisory

http://secunia.com/advisories/19238

Source: secure@microsoft.com

Vendor Advisory

http://securityreason.com/securityalert/583

Source: secure@microsoft.com

http://securitytracker.com/id?1015766

Source: secure@microsoft.com

Patch

http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm

Source: secure@microsoft.com

http://www.kb.cert.org/vuls/id/339878

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/23899

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/427632/100/0/threaded

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA06-073A.html

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2006/0950

Source: secure@microsoft.com

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-06-004.html

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/25225

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1158

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1509

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1635

Source: secure@microsoft.com

http://secunia.com/advisories/19138

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/19238

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/583

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015766

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/339878

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/23899

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/427632/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-073A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2006/0950

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-06-004.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25225

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1158

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1509

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1635

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.