CVSS: 9.3EPSS: 69%CPEs: 12EXPL: 0CVE-2006-1304
https://notcve.org/view.php?id=CVE-2006-1304
Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a "data filling operation." Desbordamiento de búfer en Microsoft Excel 2000 hasta 2003 permite a atacantes con la intervención del usuario ejecutar código de su elección mediante un fichero .xls con un registro COLINFO artesanal, lo que dispara el desbordamiento durante una "operación de relleno de datos" • http://securitytracker.com/id?1016472 http://www.nsfocus.com/english/homepage/research/0606.htm http://www.securityfocus.com/archive/1/439909/100/0/threaded http://www.securityfocus.com/bid/18888 http://www.vupen.com/english/advisories/2006/2755 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A545 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 66%CPEs: 13EXPL: 0CVE-2006-1308
https://notcve.org/view.php?id=CVE-2006-1308
Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value. Vulnerabilidad no especificada en Microsoft Excel 2000 a 2004 permite a atacantes con implicación del usuario ejecutar código de su elección mediante un fichero .xls con un valor FNGROUPCOUNT. • http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047837.html http://securitytracker.com/id?1016472 http://www.securityfocus.com/bid/18890 http://www.vupen.com/english/advisories/2006/2755 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037 https://exchange.xforce.ibmcloud.com/vulnerabilities/27464 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A243 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 70%CPEs: 13EXPL: 0CVE-2006-1306
https://notcve.org/view.php?id=CVE-2006-1306
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability." Microsoft Excel 2000 a 2004 permite a atacantes con implicación del usuario ejecutar código de su elección mediante un fichero .xls con un registro BIFF artesanal con un índice de array controlado por el atacante que es usado para un puntero a función, tcc "Vulnerabilidad de registro OBJECT malformado". • http://securitytracker.com/id?1016472 http://secway.org/advisory/AD20060711.txt http://www.securityfocus.com/archive/1/439884/100/0/threaded http://www.securityfocus.com/bid/18886 http://www.vupen.com/english/advisories/2006/2755 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A950 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 79%CPEs: 13EXPL: 0CVE-2006-2388 – Microsoft Office Excel File Rebuilding Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2006-2388
Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process. Microsoft Office Excel 2000 hasta la versión 2004 permite a atacantes asistidos por el usuario ejecutar código arbitrario a través de comentarios de celdas mal formadas, lo que conduce a modificación de "desplazamiento de datos críticos" durante el proceso de reconstrucción. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires that the attacker coerce the target into opening a malicious .XLS file. The specific flaw exists within the rebuilding of malformed cell comments. When Excel encounters a malformed record it attempts to rebuild the broken meta-data. • http://securitytracker.com/id?1016472 http://www.securityfocus.com/archive/1/439786/100/0/threaded http://www.securityfocus.com/bid/18938 http://www.vupen.com/english/advisories/2006/2755 http://www.zerodayinitiative.com/advisories/ZDI-06-022.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037 https://exchange.xforce.ibmcloud.com/vulnerabilities/27604 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A234 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 95%CPEs: 12EXPL: 1CVE-2006-3059 – Microsoft Excel - Code Execution
https://notcve.org/view.php?id=CVE-2006-3059
Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086. Vulnerabilidad no especificada en Microsoft Excel v2000 hasta la v2004 que permite a usuarios atacantes ejecutar código de su elección a través de vectores desconocidos. NOTA: esta es una vulnerabilidad diferente de CVE-2006-3086. • https://www.exploit-db.com/exploits/1944 http://blogs.securiteam.com/?p=451 http://blogs.technet.com/msrc/archive/2006/06/16/436174.aspx http://isc.sans.org/diary.php?storyid=1420 http://secunia.com/advisories/20686 http://securitytracker.com/id?1016316 http://www.kb.cert.org/vuls/id/802324 http://www.osvdb.org/26527 http://www.securityfocus.com/archive/1/437636/100/0/threaded http://www.securityfocus.com/archive/1/437936/100/0/threaded http://www&# •