Vulnerabilities > CVE-2006-3059 - Remote Code Execution vulnerability in Microsoft Excel
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 12 |
Exploit-Db
| description | Microsoft Excel Unspecified Remote Code Execution Exploit. CVE-2006-3059. Local exploit for windows platform |
| id | EDB-ID:1944 |
| last seen | 2016-01-31 |
| modified | 2006-06-22 |
| published | 2006-06-22 |
| reporter | naveed afzal |
| source | https://www.exploit-db.com/download/1944/ |
| title | Microsoft Excel Unspecified Remote Code Execution Exploit |
Nessus
NASL family MacOS X Local Security Checks NASL id MACOSX_MS_06-037.NASL description The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Excel or another Office application. last seen 2020-03-18 modified 2006-07-11 plugin id 22025 published 2006-07-11 reporter This script is Copyright (C) 2006-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/22025 title MS06-037 / MS06-038: Vulnerabilities in Microsoft Excel and Office Could Allow Remote Code Execution (917284 / 917285) (Mac OS X) NASL family Windows : Microsoft Bulletins NASL id SMB_NT_MS06-037.NASL description The remote host is running a version of Microsoft Excel that could allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it with Microsoft Excel. last seen 2020-06-01 modified 2020-06-02 plugin id 22031 published 2006-07-11 reporter This script is Copyright (C) 2006-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/22031 title MS06-037: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)
Oval
| accepted | 2012-05-28T04:01:52.904-04:00 | ||||||||||||||||
| class | vulnerability | ||||||||||||||||
| contributors |
| ||||||||||||||||
| definition_extensions |
| ||||||||||||||||
| description | Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. NOTE: this is a different vulnerability than CVE-2006-3086. | ||||||||||||||||
| family | windows | ||||||||||||||||
| id | oval:org.mitre.oval:def:537 | ||||||||||||||||
| status | accepted | ||||||||||||||||
| submitted | 2006-07-25T12:05:33 | ||||||||||||||||
| title | Microsoft Excel Malformed File Vulnerability | ||||||||||||||||
| version | 12 |
References
- http://blogs.securiteam.com/?p=451
- http://blogs.technet.com/msrc/archive/2006/06/16/436174.aspx
- http://isc.sans.org/diary.php?storyid=1420
- http://secunia.com/advisories/20686
- http://securitytracker.com/id?1016316
- http://www.kb.cert.org/vuls/id/802324
- http://www.osvdb.org/26527
- http://www.securityfocus.com/archive/1/437636/100/0/threaded
- http://www.securityfocus.com/archive/1/437936/100/0/threaded
- http://www.securityfocus.com/bid/18422
- http://www.us-cert.gov/cas/techalerts/TA06-167A.html
- http://www.us-cert.gov/cas/techalerts/TA06-192A.html
- http://www.vupen.com/english/advisories/2006/2361
- http://www.vupen.com/english/advisories/2006/2755
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27179
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A537