Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-0030 — Out-of-bounds Write in Microsoft Excel

4 documents4 sources
Severity
5.1MEDIUMNVD
EPSS
59.8%
top 1.73%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Microsoft ExcelMicrosoft Office
Timeline
PublishedMar 14
Latest updateMay 1

Description

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed graphic, which leads to memory corruption.

CVSS vector

AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4

Affected Packages2 packages

▶NVDmicrosoft/excel5 versions+4
▶NVDmicrosoft/office5 versions+4

Patches

Patch: secunia.com ↗Patch: securitytracker.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p4f5-wjww-xwp8: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to↗2022-05-01
▶
CVEList
CVE-2006-0030: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to↗2006-03-14
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Excel 95 < 2004 - Malformed Graphic File Code Execution↗2006-01-09
▶
CVE-2006-0030 — Out-of-bounds Write in Microsoft Excel | cvebase