CVEvulnerability
CVE-2006-3014
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-22
- Last modified
- 2026-09-23
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.
Affected configurations
• microsoft excel
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.html Exploit
- http://hackingspirits.com/vuln-rnd/vuln-rnd.html Exploit
- http://secunia.com/advisories/21865 Patch, Vendor Advisory
- http://secunia.com/advisories/22882 Vendor Advisory
- http://securitytracker.com/id?1016344 securitytracker.com
- http://www.adobe.com/support/security/bulletins/apsb06-11.html www.adobe.com
- http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html www.securiteam.com
- http://www.securityfocus.com/bid/18583 Exploit
- http://www.securityfocus.com/bid/19980 Patch
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/3573 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/3577 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4507 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27312 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538 oval.cisecurity.org
- http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.html Exploit
- http://hackingspirits.com/vuln-rnd/vuln-rnd.html Exploit
- http://secunia.com/advisories/21865 Patch, Vendor Advisory
- http://secunia.com/advisories/22882 Vendor Advisory
- http://securitytracker.com/id?1016344 securitytracker.com
- http://www.adobe.com/support/security/bulletins/apsb06-11.html www.adobe.com
- http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html www.securiteam.com
- http://www.securityfocus.com/bid/18583 Exploit
- http://www.securityfocus.com/bid/19980 Patch
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/3573 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/3577 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4507 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27312 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538 oval.cisecurity.org