PT-2006-2321
CVE-2006-1306
·
Published
2006-07-13
·
Updated
2018-10-18
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Microsoft Excel versions 2000 through 2004
Description
A remote code execution issue exists due to the processing of a malformed OBJECT record in Excel. This allows an attacker to execute arbitrary code via a specially crafted .xls file. An attacker could exploit this by constructing a malicious Excel file, potentially leading to remote code execution.
Recommendations
For Microsoft Excel versions 2000 through 2004, at the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾