QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-3431

Back to search

CVE-2006-3431

Published: Jul 7, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls. NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086.

VendorProductVersions

n/a

n/a

affected
n/a

References

SSRT061264
vendor-advisory
x_refsource_HP
20268
third-party-advisory
x_refsource_SECUNIA
MS06-059
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:431
vdb-entry
signature
x_refsource_OVAL
1016430
vdb-entry
x_refsource_SECTRACK
HPSBST02161
vendor-advisory
x_refsource_HP
18872
vdb-entry
x_refsource_BID
ADV-2006-2689
vdb-entry
x_refsource_VUPEN
20060703 Excel 2000/XP/2003 Style 0day POC
mailing-list
x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now