CVE Vulnerabilities

CVE-2006-0028

Published: Mar 14, 2006 | Modified: Oct 19, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.

Affected Software

Name Vendor Start Version End Version
Excel Microsoft 2000 2000
Excel Microsoft 2002 2002
Excel Microsoft 2003 2003
Excel Microsoft 2004 2004
Excel Microsoft x x
Office Microsoft 2000 2000
Office Microsoft 2003 2003
Office Microsoft 2003 2003
Office Microsoft 2004 2004
Office Microsoft v.x v.x
Office Microsoft xp xp

References