CVE-2006-1309

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2000 through 2004

Description A remote code execution issue exists due to the processing of a malformed LABEL record file. This allows attackers to execute arbitrary code via a crafted .xls file that triggers memory corruption. An attacker could exploit this by constructing a specially crafted Excel file.

Recommendations For Microsoft Excel versions 2000 through 2004, at the moment, there is no information about a newer version that contains a fix for this issue.