Description
Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.
Metrics
CVSS 2.0 5.1/10
AV:N/AC:H/Au:N/C:P/I:P/A:PWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.htmlExploit
- http://hackingspirits.com/vuln-rnd/vuln-rnd.htmlExploit
- http://secunia.com/advisories/21865Patch, Vendor Advisory
- http://secunia.com/advisories/22882Vendor Advisory
- http://securitytracker.com/id?1016344
- http://www.adobe.com/support/security/bulletins/apsb06-11.html
- http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html
- http://www.securityfocus.com/bid/18583Exploit
- http://www.securityfocus.com/bid/19980Patch
- http://www.us-cert.gov/cas/techalerts/TA06-318A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/3573Vendor Advisory
- http://www.vupen.com/english/advisories/2006/3577Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4507Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27312
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538
- http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.htmlExploit
- http://hackingspirits.com/vuln-rnd/vuln-rnd.htmlExploit
- http://secunia.com/advisories/21865Patch, Vendor Advisory
- http://secunia.com/advisories/22882Vendor Advisory
- http://securitytracker.com/id?1016344
- http://www.adobe.com/support/security/bulletins/apsb06-11.html
- http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html
- http://www.securityfocus.com/bid/18583Exploit
- http://www.securityfocus.com/bid/19980Patch
- http://www.us-cert.gov/cas/techalerts/TA06-318A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2006/3573Vendor Advisory
- http://www.vupen.com/english/advisories/2006/3577Vendor Advisory
- http://www.vupen.com/english/advisories/2006/4507Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27312
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538
Timeline
- Published
- Jun 22, 2006
- Last modified
- Sep 23, 2026
- NVD status
- Modified