CVE-2006-3875: Medium severity Microsoft Excel vulnerability

Published Oct 10, 2006

Updated

Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867.

Affected Software

6 affected components

Microsoft Excel=x

Microsoft Excel=2000

Microsoft Excel Viewer=2003

Microsoft Excel=2002

Microsoft Excel=2004

Microsoft Excel=2003

Event History

Oct 10, 2006

CVE Published

10:07 PM

Data Sourced

via NVD·10:07 PM

DescriptionSeverityAffected Software

Oct 11, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3875?

CVE-2006-3875 is considered a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2006-3875?

To fix CVE-2006-3875, users should update their Microsoft Excel applications to the latest versions available.

Who is affected by CVE-2006-3875?

CVE-2006-3875 affects users of Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003.

What types of attacks are possible with CVE-2006-3875?

CVE-2006-3875 allows user-assisted attackers to execute arbitrary code through specially crafted XLS files.

Is CVE-2006-3875 related to any other vulnerabilities?

CVE-2006-3875 is a different vulnerability than CVE-2006-2387 and CVE-2006-3867.