CVE Vulnerabilities

CVE-2006-0028

Published: Mar 14, 2006 | Modified: Oct 19, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.

Affected Software

Name Vendor Start Version End Version
Excel Microsoft 2000 (including) 2000 (including)
Excel Microsoft 2002 (including) 2002 (including)
Excel Microsoft 2003 (including) 2003 (including)
Excel Microsoft 2004 (including) 2004 (including)
Excel Microsoft x (including) x (including)
Office Microsoft 2000-sp3 (including) 2000-sp3 (including)
Office Microsoft 2003-sp1 (including) 2003-sp1 (including)
Office Microsoft 2003-sp2 (including) 2003-sp2 (including)
Office Microsoft 2004 (including) 2004 (including)
Office Microsoft v.x (including) v.x (including)
Office Microsoft xp-sp3 (including) xp-sp3 (including)

References