CVE

Id
17410  
CVE No.
CVE-2006-1306  
Status
Candidate  
Description
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."  
Phase
Assigned (20060320)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
143999 17410 CVE-2006-1306 BUGTRAQ:20060712 Microsoft Excel Array Index Error Remote Code Execution  View
144000 17410 CVE-2006-1306 URL:http://www.securityfocus.com/archive/1/archive/1/439884/100/0/threaded  View
144001 17410 CVE-2006-1306 MISC:http://secway.org/advisory/AD20060711.txt  View
144002 17410 CVE-2006-1306 MS:MS06-037  View
144003 17410 CVE-2006-1306 URL:http://www.microsoft.com/technet/security/bulletin/ms06-037.mspx  View
144004 17410 CVE-2006-1306 BID:18886  View
144005 17410 CVE-2006-1306 URL:http://www.securityfocus.com/bid/18886  View
144006 17410 CVE-2006-1306 VUPEN:ADV-2006-2755  View
144007 17410 CVE-2006-1306 URL:http://www.vupen.com/english/advisories/2006/2755  View
144008 17410 CVE-2006-1306 OVAL:oval:org.mitre.oval:def:950  View
144009 17410 CVE-2006-1306 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:950  View
144010 17410 CVE-2006-1306 SECTRACK:1016472  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58185 JVNDB-2006-000381 Microsoft Excel の不正な FNGROUPCOUNT 値による任意のコードを実行される脆弱性 Microsoft Excel には、FNGROUPCOUNT 値の処理に不備が存在するため、メモリ領域が破壊される脆弱性が存在します。 CVE-2006-1308 17410 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000381.html  View