CVE-2006-1302

Published: Jul 13, 2006Modified: Apr 16, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."

Affected (13)

Products: Microsoft: Excel, Excel Viewer

2 products

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Version 2000
Microsoft Excel	Version 2000 sp2
Microsoft Excel	Version 2000 sp3
Microsoft Excel	Version 2000 sr1
Microsoft Excel	Version 2002
Microsoft Excel	Version 2002 sp1
Microsoft Excel	Version 2002 sp2
Microsoft Excel	Version 2002 sp3
Microsoft Excel	Version 2003
Microsoft Excel	Version 2003 sp1
Microsoft Excel	Version 2004
Microsoft Excel	Version x
Microsoft Excel Viewer	Version 2003

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (16)

http://securityreason.com/securityalert/1238

Source: secure@microsoft.com

http://securitytracker.com/id?1016472

Source: secure@microsoft.com

http://www.nsfocus.com/english/homepage/research/0605.htm

Source: secure@microsoft.com

Vendor Advisory

http://www.securityfocus.com/archive/1/439914/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/18885

Source: secure@microsoft.com

Patch

http://www.vupen.com/english/advisories/2006/2755

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A379

Source: secure@microsoft.com

http://securityreason.com/securityalert/1238

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016472

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.nsfocus.com/english/homepage/research/0605.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/439914/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18885

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/2755

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A379

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.