CVE-2006-3014CWE-20

CVE-2006-3014

Medium · published June 22, 2006

CVSS v2.0
5.1
EPSS
30%
Percentile
98.2
In the wild
Unconfirmed
What it is

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.

The record
Technical detail
CVSS v2.0
5.1 · MEDIUM
Vector
AV:N/AC:H/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.30101 · 98.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2006-06-22T04:06Z
Affected products (1)
ProductVersionsFixed in
microsoft/excelall versions—
References (32)
http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.html · [email protected]http://hackingspirits.com/vuln-rnd/vuln-rnd.html · [email protected]http://secunia.com/advisories/21865 · [email protected]http://secunia.com/advisories/22882 · [email protected]http://securitytracker.com/id?1016344 · [email protected]http://www.securityfocus.com/bid/18583 · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/19980 · af854a3a-2127-422b-91ae-364da2661108http://www.us-cert.gov/cas/techalerts/TA06-318A.html · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/3573 · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/3577 · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/4507 · af854a3a-2127-422b-91ae-364da2661108https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27312 · af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538 · af854a3a-2127-422b-91ae-364da2661108http://www.adobe.com/support/security/bulletins/apsb06-11.html · [email protected]http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html · [email protected]http://www.securityfocus.com/bid/18583 · [email protected]http://www.securityfocus.com/bid/19980 · [email protected]http://www.us-cert.gov/cas/techalerts/TA06-318A.html · [email protected]http://www.vupen.com/english/advisories/2006/3573 · [email protected]http://www.vupen.com/english/advisories/2006/3577 · [email protected]http://www.vupen.com/english/advisories/2006/4507 · [email protected]https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/27312 · [email protected]https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538 · [email protected]http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.html · af854a3a-2127-422b-91ae-364da2661108http://hackingspirits.com/vuln-rnd/vuln-rnd.html · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21865 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/22882 · af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016344 · af854a3a-2127-422b-91ae-364da2661108http://www.adobe.com/support/security/bulletins/apsb06-11.html · af854a3a-2127-422b-91ae-364da2661108http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 JUN 00:00Z
    Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded…
    cvelistv5