CVE-2006-3014 | BDVDB-2026-17653 Detail
Description#
Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.vupen.com/english/advisories/2006/3573
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html
- http://www.vupen.com/english/advisories/2006/4507
- http://www.securityfocus.com/bid/19980
- http://secunia.com/advisories/22882
- http://secunia.com/advisories/21865
- http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.html
- http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html
- http://hackingspirits.com/vuln-rnd/vuln-rnd.html
- http://www.adobe.com/support/security/bulletins/apsb06-11.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538
- http://www.vupen.com/english/advisories/2006/3577
- http://www.securityfocus.com/bid/18583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27312
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069
Show all 16
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.