CVE-2006-0028 — Out-of-bounds Write in Microsoft Excel
3 documents3 sources
Severity
5.1MEDIUMNVD
EPSS
32.3%
top 3.15%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 14
Latest updateMay 1
Description
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
CVSS vector
AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4
Affected Packages2 packages
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-c3qv-56cw-76xq: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to↗2022-05-01
CVEList▶
CVE-2006-0028: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to↗2006-03-14