Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-07-13 15:05
Updated : 2018-10-12 14:39
NVD link : CVE-2006-1309
Mitre link : CVE-2006-1309
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
microsoft
- excel
- excel_viewer