CVE-2006-3867: Medium severity Microsoft Excel vulnerability

Published Oct 10, 2006

Updated

Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted Lotus 1-2-3 file, a different vulnerability than CVE-2006-2387 and CVE-2006-3875.

Affected Software

6 affected components

Microsoft Excel=x

Microsoft Excel=2000

Microsoft Excel Viewer=2003

Microsoft Excel=2002

Microsoft Excel=2004

Microsoft Excel=2003

Event History

Oct 10, 2006

CVE Published

10:07 PM

Data Sourced

via NVD·10:07 PM

DescriptionSeverityAffected Software

Oct 11, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3867?

CVE-2006-3867 is considered to have a critical severity as it allows arbitrary code execution.

How do I fix CVE-2006-3867?

To mitigate CVE-2006-3867, users should update to the latest version of Microsoft Excel that addresses this vulnerability.

What products are affected by CVE-2006-3867?

CVE-2006-3867 affects Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003.

How does CVE-2006-3867 exploit the vulnerability?

CVE-2006-3867 is exploited through user-assisted attacks involving specially crafted Lotus 1-2-3 files.

Can CVE-2006-3867 affect Mac users?

Yes, CVE-2006-3867 can affect Mac users of various versions of Microsoft Excel and the Excel Viewer.