// For flags

CVE-2006-7037

 

Severity Score

4.4
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to (1) bypass password protection by replacing the password field with a hash of a known password, (2) modify timestamps to avoid detection of modifications, (3) remove locks by removing the "is-locked" attribute, and (4) view locked data, which is stored in plaintext.

Mathcad versiones 12 hasta 13.1, permite a usuarios locales omitir las funcionalidades de seguridad accediendo o editando directamente la representación XML de la hoja de trabajo con un editor de texto u otro programa, que permite a atacantes (1) omitir la protección con contraseña reemplazando el campo password con un hash de una contraseña conocida, (2) modificar las marcas de tiempo para evitar la detección de modificaciones, (3) eliminar bloqueos eliminando el atributo "is-locked", y (4) visualizar datos bloqueados, que se almacenan en texto plano.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-02-22 CVE Reserved
  • 2007-02-23 CVE Published
  • 2024-07-18 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
12
Search vendor "Mathsoft" for product "Mathcad" and version "12"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 2000
Search vendor "Microsoft" for product "Windows 2000"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
12
Search vendor "Mathsoft" for product "Mathcad" and version "12"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 2003 Server
Search vendor "Microsoft" for product "Windows 2003 Server"
sp2
Search vendor "Microsoft" for product "Windows 2003 Server" and version "sp2"
-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
12
Search vendor "Mathsoft" for product "Mathcad" and version "12"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 95
Search vendor "Microsoft" for product "Windows 95"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
12
Search vendor "Mathsoft" for product "Mathcad" and version "12"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 98
Search vendor "Microsoft" for product "Windows 98"
*gold
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
12
Search vendor "Mathsoft" for product "Mathcad" and version "12"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 98se
Search vendor "Microsoft" for product "Windows 98se"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
12
Search vendor "Mathsoft" for product "Mathcad" and version "12"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Me
Search vendor "Microsoft" for product "Windows Me"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
12
Search vendor "Mathsoft" for product "Mathcad" and version "12"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Nt
Search vendor "Microsoft" for product "Windows Nt"
4.0
Search vendor "Microsoft" for product "Windows Nt" and version "4.0"
-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
12
Search vendor "Mathsoft" for product "Mathcad" and version "12"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
*gold
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13
Search vendor "Mathsoft" for product "Mathcad" and version "13"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 2000
Search vendor "Microsoft" for product "Windows 2000"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13
Search vendor "Mathsoft" for product "Mathcad" and version "13"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 2003 Server
Search vendor "Microsoft" for product "Windows 2003 Server"
sp2
Search vendor "Microsoft" for product "Windows 2003 Server" and version "sp2"
-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13
Search vendor "Mathsoft" for product "Mathcad" and version "13"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 95
Search vendor "Microsoft" for product "Windows 95"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13
Search vendor "Mathsoft" for product "Mathcad" and version "13"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 98
Search vendor "Microsoft" for product "Windows 98"
*gold
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13
Search vendor "Mathsoft" for product "Mathcad" and version "13"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 98se
Search vendor "Microsoft" for product "Windows 98se"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13
Search vendor "Mathsoft" for product "Mathcad" and version "13"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Me
Search vendor "Microsoft" for product "Windows Me"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13
Search vendor "Mathsoft" for product "Mathcad" and version "13"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Nt
Search vendor "Microsoft" for product "Windows Nt"
4.0
Search vendor "Microsoft" for product "Windows Nt" and version "4.0"
-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13
Search vendor "Mathsoft" for product "Mathcad" and version "13"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
*gold
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13.1
Search vendor "Mathsoft" for product "Mathcad" and version "13.1"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 2000
Search vendor "Microsoft" for product "Windows 2000"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13.1
Search vendor "Mathsoft" for product "Mathcad" and version "13.1"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 2003 Server
Search vendor "Microsoft" for product "Windows 2003 Server"
sp2
Search vendor "Microsoft" for product "Windows 2003 Server" and version "sp2"
-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13.1
Search vendor "Mathsoft" for product "Mathcad" and version "13.1"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 95
Search vendor "Microsoft" for product "Windows 95"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13.1
Search vendor "Mathsoft" for product "Mathcad" and version "13.1"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 98
Search vendor "Microsoft" for product "Windows 98"
*gold
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13.1
Search vendor "Mathsoft" for product "Mathcad" and version "13.1"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows 98se
Search vendor "Microsoft" for product "Windows 98se"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13.1
Search vendor "Mathsoft" for product "Mathcad" and version "13.1"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Me
Search vendor "Microsoft" for product "Windows Me"
*-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13.1
Search vendor "Mathsoft" for product "Mathcad" and version "13.1"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Nt
Search vendor "Microsoft" for product "Windows Nt"
4.0
Search vendor "Microsoft" for product "Windows Nt" and version "4.0"
-
Safe
Mathsoft
Search vendor "Mathsoft"
Mathcad
Search vendor "Mathsoft" for product "Mathcad"
13.1
Search vendor "Mathsoft" for product "Mathcad" and version "13.1"
-
Affected
in Microsoft
Search vendor "Microsoft"
Windows Xp
Search vendor "Microsoft" for product "Windows Xp"
*gold
Safe