CVE-2006-2387
Last modified
CVE-2006-2387 is a vulnerability of currently unknown severity. Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.. EPSS estimates a 12.12% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Office | 2000 |
| Microsoft | Office | 2001 |
| Microsoft | Office | 2003 |
| Microsoft | Office | 2004 |
| Microsoft | Office | v.x |
References
- http://securitytracker.com/id?1017031Third Party Advisory, VDB Entry
- http://www.kb.cert.org/vuls/id/706668Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/20344Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/3978Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-033.htmlThird Party Advisory, VDB Entry
- http://securitytracker.com/id?1017031Third Party Advisory, VDB Entry
- http://www.kb.cert.org/vuls/id/706668Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/20344Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/3978Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-033.htmlThird Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-2387?
How severe is CVE-2006-2387?
How do I fix CVE-2006-2387?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-2381Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2006-2382Heap-based buffer overflow in Microsoft Internet Explorer 5.…
- CVE-2006-2383Unspecified vulnerability in Microsoft Internet Explorer 5.0…
- CVE-2006-2384Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier a…
- CVE-2006-2385Unspecified vulnerability in Microsoft Internet Explorer 5.0…
- CVE-2006-2386Unspecified vulnerability in Microsoft Outlook Express 6 and…
- CVE-2006-2388Microsoft Office Excel 2000 through 2004 allows user-assiste…
- CVE-2006-2389Unspecified vulnerability in Microsoft Office 2003 SP1 and S…
- CVE-2006-2390Cross-site scripting (XSS) vulnerability in OZJournals 1.2 a…
- CVE-2006-2391Buffer overflow in EMC Retrospect Client 5.1 through 7.5 all…
- CVE-2006-2392PHP remote file inclusion vulnerability in public_includes/p…
- CVE-2006-2393The client_cmd function in Empire 4.3.2 and earlier allows r…
Are you affected by CVE-2006-2387?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
