PT-2006-1119 · Microsoft · Office+4

Arnaud Dovi + 1 · Published 2006-03-14 · Updated 2018-10-19 · CVE-2006-0028

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2000 through 2003 Microsoft Office version 2000 SP3

Description: A remote code execution issue exists in Excel, related to the parsing of malformed file formats. This can be exploited by an attacker constructing a specially crafted Excel file, allowing for remote code execution. The issue involves memory corruption, probably due to invalid pointers, when parsing a BIFF format file containing malformed BOOLERR records.

Recommendations: For Microsoft Excel versions 2000 through 2003, and Microsoft Office version 2000 SP3, consider disabling the parsing of BIFF format files until a patch is available. As a temporary workaround, restrict the use of Excel to open files from untrusted sources to minimize the risk of exploitation. Avoid using Excel to open specially crafted files that could contain malformed parsing format until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0028

Affected Products

Office Excel

Office

Office Powerpoint

Office Word

Outlook

References · 28

• http://secunia.com/advisories/19138 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0028 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0028 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012 · Vendor Advisory
• http://securitytracker.com/id?1015766 · Patch
• http://vupen.com/english/advisories/2006/0950 · Vendor Advisory
• http://secunia.com/advisories/19238 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0028 · Note
• http://xforce.iss.net/xforce/xfdb/25225 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1635 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm · Note
• http://securityfocus.com/archive/1/427632/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25225 · Note
• http://frsirt.com/english/advisories/2006/0950 · Note