Vulnerability Description
Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Office | 2000 |
References
- http://securitytracker.com/id?1017031Third Party AdvisoryVDB Entry
- http://www.kb.cert.org/vuls/id/706668Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/archive/1/448147/100/0/threaded
- http://www.securityfocus.com/archive/1/449179/100/0/threaded
- http://www.securityfocus.com/bid/20344Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2006/3978Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-033.htmlThird Party AdvisoryVDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-05
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Third Party Advisory
- http://securitytracker.com/id?1017031Third Party AdvisoryVDB Entry
- http://www.kb.cert.org/vuls/id/706668Third Party AdvisoryUS Government Resource
- http://www.securityfocus.com/archive/1/448147/100/0/threaded
- http://www.securityfocus.com/archive/1/449179/100/0/threaded
- http://www.securityfocus.com/bid/20344Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2006/3978Vendor Advisory
FAQ
What is CVE-2006-2387?
CVE-2006-2387 is a vulnerability with a CVSS score of 5.1 (MEDIUM). Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbit...
How severe is CVE-2006-2387?
CVE-2006-2387 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-2387?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Office.