CVE-2005-4131

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.
References
Link Resource
http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538
http://informationweek.com/story/showArticle.jhtml?articleID=174910198
http://news.com.com/2061-10789_3-5988086.html
http://news.zdnet.com/2100-1009_22-5989078.html
http://secunia.com/advisories/19138 Vendor Advisory
http://secunia.com/advisories/19238 Vendor Advisory
http://securityreason.com/securityalert/584
http://securityreason.com/securityalert/591
http://securitytracker.com/id?1015333
http://securitytracker.com/id?1015766
http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm
http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/
http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614
http://www.kb.cert.org/vuls/id/642428 US Government Resource
http://www.osvdb.org/blog/?p=71
http://www.securityfocus.com/archive/1/427635/100/0/threaded
http://www.securityfocus.com/archive/1/427698/100/0/threaded
http://www.securityfocus.com/bid/15780 Patch
http://www.securityfocus.com/news/11363
http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html
http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/
http://www.us-cert.gov/cas/techalerts/TA06-073A.html US Government Resource
http://www.vupen.com/english/advisories/2006/0950 Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
https://exchange.xforce.ibmcloud.com/vulnerabilities/23537
http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538
http://informationweek.com/story/showArticle.jhtml?articleID=174910198
http://news.com.com/2061-10789_3-5988086.html
http://news.zdnet.com/2100-1009_22-5989078.html
http://secunia.com/advisories/19138 Vendor Advisory
http://secunia.com/advisories/19238 Vendor Advisory
http://securityreason.com/securityalert/584
http://securityreason.com/securityalert/591
http://securitytracker.com/id?1015333
http://securitytracker.com/id?1015766
http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm
http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/
http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614
http://www.kb.cert.org/vuls/id/642428 US Government Resource
http://www.osvdb.org/blog/?p=71
http://www.securityfocus.com/archive/1/427635/100/0/threaded
http://www.securityfocus.com/archive/1/427698/100/0/threaded
http://www.securityfocus.com/bid/15780 Patch
http://www.securityfocus.com/news/11363
http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html
http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/
http://www.us-cert.gov/cas/techalerts/TA06-073A.html US Government Resource
http://www.vupen.com/english/advisories/2006/0950 Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
https://exchange.xforce.ibmcloud.com/vulnerabilities/23537
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:excel:95:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:97:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:97:sr1:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:97:sr2:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2000:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2000:sr1:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2003:sp1:*:*:*:*:*:*

History

21 Nov 2024, 00:03

Type Values Removed Values Added
References () http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538 - () http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538 -
References () http://informationweek.com/story/showArticle.jhtml?articleID=174910198 - () http://informationweek.com/story/showArticle.jhtml?articleID=174910198 -
References () http://news.com.com/2061-10789_3-5988086.html - () http://news.com.com/2061-10789_3-5988086.html -
References () http://news.zdnet.com/2100-1009_22-5989078.html - () http://news.zdnet.com/2100-1009_22-5989078.html -
References () http://secunia.com/advisories/19138 - Vendor Advisory () http://secunia.com/advisories/19138 - Vendor Advisory
References () http://secunia.com/advisories/19238 - Vendor Advisory () http://secunia.com/advisories/19238 - Vendor Advisory
References () http://securityreason.com/securityalert/584 - () http://securityreason.com/securityalert/584 -
References () http://securityreason.com/securityalert/591 - () http://securityreason.com/securityalert/591 -
References () http://securitytracker.com/id?1015333 - () http://securitytracker.com/id?1015333 -
References () http://securitytracker.com/id?1015766 - () http://securitytracker.com/id?1015766 -
References () http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm - () http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm -
References () http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/ - () http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/ -
References () http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614 - () http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614 -
References () http://www.kb.cert.org/vuls/id/642428 - US Government Resource () http://www.kb.cert.org/vuls/id/642428 - US Government Resource
References () http://www.osvdb.org/blog/?p=71 - () http://www.osvdb.org/blog/?p=71 -
References () http://www.securityfocus.com/archive/1/427635/100/0/threaded - () http://www.securityfocus.com/archive/1/427635/100/0/threaded -
References () http://www.securityfocus.com/archive/1/427698/100/0/threaded - () http://www.securityfocus.com/archive/1/427698/100/0/threaded -
References () http://www.securityfocus.com/bid/15780 - Patch () http://www.securityfocus.com/bid/15780 - Patch
References () http://www.securityfocus.com/news/11363 - () http://www.securityfocus.com/news/11363 -
References () http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html - () http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html -
References () http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/ - () http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/ -
References () http://www.us-cert.gov/cas/techalerts/TA06-073A.html - US Government Resource () http://www.us-cert.gov/cas/techalerts/TA06-073A.html - US Government Resource
References () http://www.vupen.com/english/advisories/2006/0950 - Vendor Advisory () http://www.vupen.com/english/advisories/2006/0950 - Vendor Advisory
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/23537 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/23537 -

07 Nov 2023, 01:58

Type Values Removed Values Added
References
  • {'url': 'http://www.eweek.com/article2/0,1759,1899697,00.asp?kc=EWRSS03129TX1K0000614', 'name': 'http://www.eweek.com/article2/0,1759,1899697,00.asp?kc=EWRSS03129TX1K0000614', 'tags': [], 'refsource': 'MISC'}
  • () http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614 -

Information

Published : 2005-12-09 11:03

Updated : 2024-11-21 00:03


NVD link : CVE-2005-4131

Mitre link : CVE-2005-4131

CVE.ORG link : CVE-2005-4131


JSON object : View

Products Affected

microsoft

  • excel