CVE-2006-2387: Medium severity Microsoft Office vulnerability

Published Oct 10, 2006

Updated

Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.

Affected Software

17 affected components

Microsoft Office=2003-sp1

Microsoft Office=2001-sr1

Microsoft Office=2004

Microsoft Office=2000

Microsoft Office=2003-sp2

Microsoft Office=2001

Microsoft Office=v.x

Microsoft Office=2000-sp1

Microsoft Office=2000-sp2

Microsoft Office=2003

Microsoft Office=2003-sp3

Microsoft Office=2000-sp3

Microsoft Office=2000

Event History

Oct 10, 2006

CVE Published

10:07 PM

Data Sourced

via NVD·10:07 PM

DescriptionSeverityAffected Software

Oct 11, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-2387?

CVE-2006-2387 has a high severity rating due to its potential to allow attackers to execute arbitrary code.

How do I fix CVE-2006-2387?

To mitigate CVE-2006-2387, users should apply the latest security patches released by Microsoft for the affected versions of Excel.

Which versions of Microsoft Excel are affected by CVE-2006-2387?

CVE-2006-2387 affects Microsoft Excel 2000, 2001, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003.

What type of vulnerability is CVE-2006-2387?

CVE-2006-2387 is an unspecified vulnerability that can be exploited through a crafted DATETIME record in an XLS file.

What should I do if I suspect exploitation of CVE-2006-2387?

If you suspect exploitation of CVE-2006-2387, immediately disconnect the affected machine from the network and update all software to the latest version.