{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-07-11T00:00:00", "descriptions": [{"lang": "en", "value": "Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka \"Malformed OBJECT record Vulnerability.\""}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft"}, "references": [{"name": "MS06-037", "tags": ["vendor-advisory", "x_refsource_MS"], "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037"}, {"name": "20060712 Microsoft Excel Array Index Error Remote Code Execution", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/439884/100/0/threaded"}, {"name": "oval:org.mitre.oval:def:950", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A950"}, {"name": "1016472", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016472"}, {"name": "18886", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18886"}, {"tags": ["x_refsource_MISC"], "url": "http://secway.org/advisory/AD20060711.txt"}, {"name": "ADV-2006-2755", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2755"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@microsoft.com", "ID": "CVE-2006-1306", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka \"Malformed OBJECT record Vulnerability.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "MS06-037", "refsource": "MS", "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037"}, {"name": "20060712 Microsoft Excel Array Index Error Remote Code Execution", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/439884/100/0/threaded"}, {"name": "oval:org.mitre.oval:def:950", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A950"}, {"name": "1016472", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016472"}, {"name": "18886", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18886"}, {"name": "http://secway.org/advisory/AD20060711.txt", "refsource": "MISC", "url": "http://secway.org/advisory/AD20060711.txt"}, {"name": "ADV-2006-2755", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2755"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T17:03:28.942Z"}, "title": "CVE Program Container", "references": [{"name": "MS06-037", "tags": ["vendor-advisory", "x_refsource_MS", "x_transferred"], "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037"}, {"name": "20060712 Microsoft Excel Array Index Error Remote Code Execution", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/439884/100/0/threaded"}, {"name": "oval:org.mitre.oval:def:950", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A950"}, {"name": "1016472", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016472"}, {"name": "18886", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18886"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://secway.org/advisory/AD20060711.txt"}, {"name": "ADV-2006-2755", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2755"}]}]}, "cveMetadata": {"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "assignerShortName": "microsoft", "cveId": "CVE-2006-1306", "datePublished": "2006-07-13T21:00:00", "dateReserved": "2006-03-20T00:00:00", "dateUpdated": "2024-08-07T17:03:28.942Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*", "matchCriteriaId": "F55D42D5-7371-47C2-BF55-B7F51C19B61E", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*", "matchCriteriaId": "D4FBEB90-1BF2-4E84-9A74-EAD226AAA0A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*", "matchCriteriaId": "439B26BA-376C-4D6B-B7BA-B66B8BDA8E37", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*", "matchCriteriaId": "27C6E1BC-406E-4B0B-B513-33226AC4482D", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*", "matchCriteriaId": "082D3262-87E3-4245-AD9C-02BE0871FA3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*", "matchCriteriaId": "C619E79B-90FB-4812-B0F3-115B47498492", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*", "matchCriteriaId": "EC893353-909C-49A8-8C3A-AD325C1D365D", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*", "matchCriteriaId": "896E23B1-AB34-43FF-96F3-BA6ED7F162AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*", "matchCriteriaId": "5F79E0AB-7081-4F97-BFE4-9AF84F643B9A", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*", "matchCriteriaId": "9AED7433-3C95-4868-B05D-244149E0E33E", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:2004:*:mac_os_x:*:*:*:*:*", "matchCriteriaId": "B29EBC56-422C-45DF-B241-FA3EF1F7A8EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel:x:*:mac_os_x:*:*:*:*:*", "matchCriteriaId": "DA71E158-6D0A-4BEF-8471-FE5C864E7073", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*", "matchCriteriaId": "FDB0020C-A804-4003-B411-1AC7A6E7193E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka \"Malformed OBJECT record Vulnerability.\""}, {"lang": "es", "value": "Microsoft Excel 2000 a 2004 permite a atacantes con implicaci\u00f3n del usuario ejecutar c\u00f3digo de su elecci\u00f3n mediante un fichero .xls con un registro BIFF artesanal con un \u00edndice de array controlado por el atacante que es usado para un puntero a funci\u00f3n, tcc \"Vulnerabilidad de registro OBJECT malformado\"."}], "id": "CVE-2006-1306", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2006-07-13T21:05:00.000", "references": [{"source": "secure@microsoft.com", "url": "http://securitytracker.com/id?1016472"}, {"source": "secure@microsoft.com", "tags": ["Vendor Advisory"], "url": "http://secway.org/advisory/AD20060711.txt"}, {"source": "secure@microsoft.com", "url": "http://www.securityfocus.com/archive/1/439884/100/0/threaded"}, {"source": "secure@microsoft.com", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/18886"}, {"source": "secure@microsoft.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/2755"}, {"source": "secure@microsoft.com", "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037"}, {"source": "secure@microsoft.com", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A950"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016472"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secway.org/advisory/AD20060711.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/439884/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/18886"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/2755"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A950"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}