CVE-2006-3014

published 2006-06-22

CVE-2006-3014: Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded…

Priority P4 31 medium 5.1 CVSS 2.0

AV N AC H Au N C P I P A P

EXPLOIT

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.

Detection & IOCs extracted from sources · hover to see the quote

url https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28087.zip↗

• → Detect Excel spreadsheets with embedded Shockwave Flash Player ActiveX Objects, which auto-execute on open and can run arbitrary JavaScript or redirect users to attacker-controlled sites. ↗
• → Monitor for Flash Player ActiveX Objects embedded within Office documents (e.g., .xls files) executing script content without user confirmation prompts. ↗

• · Vulnerability affects Windows 2003 SP1, Windows XP Professional SP1/SP2, and Windows 2000 Professional, all running Microsoft Office 2003; other versions may also be vulnerable. ↗
• · CVE-2006-3014 is Windows-platform specific and is distinct from the related Flash Player input validation CVEs (CVE-2006-3311, CVE-2006-3587, CVE-2006-3588) which affect Flash Player 8.0.24.0 and earlier. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20