Vulnerabilities > CVE-2006-1308 - Remote Code Execution vulnerability in Microsoft Excel FNGROUPCOUNT Record

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
microsoft
critical
nessus
NVD
Published: 2006-07-13
Updated: 2018-10-12

Summary

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value.

Vulnerable Configurations

Part Description Count
Application
Microsoft
13

Nessus

  • NASL familyMacOS X Local Security Checks
    NASL idMACOSX_MS_06-037.NASL
    descriptionThe remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Excel or another Office application.
    last seen2020-03-18
    modified2006-07-11
    plugin id22025
    published2006-07-11
    reporterThis script is Copyright (C) 2006-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/22025
    titleMS06-037 / MS06-038: Vulnerabilities in Microsoft Excel and Office Could Allow Remote Code Execution (917284 / 917285) (Mac OS X)
  • NASL familyWindows : Microsoft Bulletins
    NASL idSMB_NT_MS06-037.NASL
    descriptionThe remote host is running a version of Microsoft Excel that could allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it with Microsoft Excel.
    last seen2020-06-01
    modified2020-06-02
    plugin id22031
    published2006-07-11
    reporterThis script is Copyright (C) 2006-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/22031
    titleMS06-037: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)

Oval

accepted2012-05-28T04:01:35.217-04:00
classvulnerability
contributors
  • nameRobert L. Hollis
    organizationThreatGuard, Inc.
  • nameShane Shaffer
    organizationG2, Inc.
definition_extensions
  • commentMicrosoft Excel 2000 is installed
    ovaloval:org.mitre.oval:def:758
  • commentMicrosoft Excel 2002 is installed
    ovaloval:org.mitre.oval:def:473
  • commentMicrosoft Excel 2003 is installed
    ovaloval:org.mitre.oval:def:764
  • commentMicrosoft Excel Viewer 2003 is installed
    ovaloval:org.mitre.oval:def:439
descriptionUnspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value.
familywindows
idoval:org.mitre.oval:def:243
statusaccepted
submitted2006-07-25T12:05:33
titleMicrosoft Excel Malformed FNGROUPCOUNT value Vulnerability
version12

References