CVE-2006-1301: Code Injection
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1301?
CVE-2006-1301 is considered to have a critical severity level due to its potential for remote code execution.
How do I fix CVE-2006-1301?
To fix CVE-2006-1301, users should update their Microsoft Excel software to the latest version or apply available security patches.
Which Microsoft Excel versions are affected by CVE-2006-1301?
CVE-2006-1301 affects multiple versions of Microsoft Excel including 2000, 2002, 2003, and 2004.
What type of attack does CVE-2006-1301 enable?
CVE-2006-1301 enables user-assisted attackers to execute arbitrary code when a specially crafted .xls file is opened.
Is CVE-2006-1301 related to other vulnerabilities?
Yes, CVE-2006-1301 is a different vulnerability than CVE-2006-1302, although both involve similar issues pertaining to Microsoft Excel.