CVE-2005-4131 | BDVDB-2026-13913 Detail
Description#
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23537
- http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538
- http://www.securityfocus.com/bid/15780
- http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614
- http://securityreason.com/securityalert/584
- http://informationweek.com/story/showArticle.jhtml?articleID=174910198
- http://www.vupen.com/english/advisories/2006/0950
- http://news.zdnet.com/2100-1009_22-5989078.html
- http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html
- http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm
- http://securityreason.com/securityalert/591
- http://secunia.com/advisories/19238
- http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/
- http://www.us-cert.gov/cas/techalerts/TA06-073A.html
- http://secunia.com/advisories/19138
Show all 25
- http://www.osvdb.org/blog/?p=71
- http://securitytracker.com/id?1015333
- http://www.securityfocus.com/archive/1/427635/100/0/threaded
- http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/
- http://securitytracker.com/id?1015766
- http://www.kb.cert.org/vuls/id/642428
- http://www.securityfocus.com/archive/1/427698/100/0/threaded
- http://www.securityfocus.com/news/11363
- http://news.com.com/2061-10789_3-5988086.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.