Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted BIFF record with an attacker-controlled array index that is used for a function pointer, aka "Malformed OBJECT record Vulnerability."

The remote host is running a version of Microsoft Excel that could allow arbitrary code to be run.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it with Microsoft Excel.

The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Excel or another Office application.

ID	Name	Product	Family	Severity
22031	MS06-037: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (917285)	Nessus	Windows : Microsoft Bulletins	medium
22025	MS06-037 / MS06-038: Vulnerabilities in Microsoft Excel and Office Could Allow Remote Code Execution (917284 / 917285) (Mac OS X)	Nessus	MacOS X Local Security Checks	medium

Detections

Analytics

CVE-2006-1306

high

Tenable Plugins

medium

medium