CVE-2006-7037
Severity Score
4.4
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to (1) bypass password protection by replacing the password field with a hash of a known password, (2) modify timestamps to avoid detection of modifications, (3) remove locks by removing the "is-locked" attribute, and (4) view locked data, which is stored in plaintext.
Mathcad versiones 12 hasta 13.1, permite a usuarios locales omitir las funcionalidades de seguridad accediendo o editando directamente la representación XML de la hoja de trabajo con un editor de texto u otro programa, que permite a atacantes (1) omitir la protección con contraseña reemplazando el campo password con un hash de una contraseña conocida, (2) modificar las marcas de tiempo para evitar la detección de modificaciones, (3) eliminar bloqueos eliminando el atributo "is-locked", y (4) visualizar datos bloqueados, que se almacenan en texto plano.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-02-22 CVE Reserved
- 2007-02-23 CVE Published
- 2024-07-18 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://securityreason.com/securityalert/2305 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/436441/30/4560/threaded | Mailing List | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/27115 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/27116 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/27117 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/27118 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 12 Search vendor "Mathsoft" for product "Mathcad" and version "12" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 12 Search vendor "Mathsoft" for product "Mathcad" and version "12" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | sp2 Search vendor "Microsoft" for product "Windows 2003 Server" and version "sp2" | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 12 Search vendor "Mathsoft" for product "Mathcad" and version "12" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 95 Search vendor "Microsoft" for product "Windows 95" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 12 Search vendor "Mathsoft" for product "Mathcad" and version "12" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 98 Search vendor "Microsoft" for product "Windows 98" | * | gold |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 12 Search vendor "Mathsoft" for product "Mathcad" and version "12" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 98se Search vendor "Microsoft" for product "Windows 98se" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 12 Search vendor "Mathsoft" for product "Mathcad" and version "12" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Me Search vendor "Microsoft" for product "Windows Me" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 12 Search vendor "Mathsoft" for product "Mathcad" and version "12" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Nt Search vendor "Microsoft" for product "Windows Nt" | 4.0 Search vendor "Microsoft" for product "Windows Nt" and version "4.0" | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 12 Search vendor "Mathsoft" for product "Mathcad" and version "12" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | gold |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13 Search vendor "Mathsoft" for product "Mathcad" and version "13" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13 Search vendor "Mathsoft" for product "Mathcad" and version "13" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | sp2 Search vendor "Microsoft" for product "Windows 2003 Server" and version "sp2" | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13 Search vendor "Mathsoft" for product "Mathcad" and version "13" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 95 Search vendor "Microsoft" for product "Windows 95" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13 Search vendor "Mathsoft" for product "Mathcad" and version "13" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 98 Search vendor "Microsoft" for product "Windows 98" | * | gold |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13 Search vendor "Mathsoft" for product "Mathcad" and version "13" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 98se Search vendor "Microsoft" for product "Windows 98se" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13 Search vendor "Mathsoft" for product "Mathcad" and version "13" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Me Search vendor "Microsoft" for product "Windows Me" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13 Search vendor "Mathsoft" for product "Mathcad" and version "13" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Nt Search vendor "Microsoft" for product "Windows Nt" | 4.0 Search vendor "Microsoft" for product "Windows Nt" and version "4.0" | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13 Search vendor "Mathsoft" for product "Mathcad" and version "13" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | gold |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13.1 Search vendor "Mathsoft" for product "Mathcad" and version "13.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13.1 Search vendor "Mathsoft" for product "Mathcad" and version "13.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | sp2 Search vendor "Microsoft" for product "Windows 2003 Server" and version "sp2" | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13.1 Search vendor "Mathsoft" for product "Mathcad" and version "13.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 95 Search vendor "Microsoft" for product "Windows 95" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13.1 Search vendor "Mathsoft" for product "Mathcad" and version "13.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 98 Search vendor "Microsoft" for product "Windows 98" | * | gold |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13.1 Search vendor "Mathsoft" for product "Mathcad" and version "13.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 98se Search vendor "Microsoft" for product "Windows 98se" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13.1 Search vendor "Mathsoft" for product "Mathcad" and version "13.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Me Search vendor "Microsoft" for product "Windows Me" | * | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13.1 Search vendor "Mathsoft" for product "Mathcad" and version "13.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Nt Search vendor "Microsoft" for product "Windows Nt" | 4.0 Search vendor "Microsoft" for product "Windows Nt" and version "4.0" | - |
Safe
|
| Mathsoft Search vendor "Mathsoft" | Mathcad Search vendor "Mathsoft" for product "Mathcad" | 13.1 Search vendor "Mathsoft" for product "Mathcad" and version "13.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | * | gold |
Safe
|