Описание
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-0028
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25225
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1158
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1509
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1635
- http://secunia.com/advisories/19138
- http://secunia.com/advisories/19238
- http://securityreason.com/securityalert/583
- http://securitytracker.com/id?1015766
- http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm
- http://www.kb.cert.org/vuls/id/339878
- http://www.osvdb.org/23899
- http://www.securityfocus.com/archive/1/427632/100/0/threaded
- http://www.us-cert.gov/cas/techalerts/TA06-073A.html
- http://www.vupen.com/english/advisories/2006/0950
- http://www.zerodayinitiative.com/advisories/ZDI-06-004.html
EPSS
CVE ID
Связанные уязвимости
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
EPSS