CVE - CVE-2005-4131

CVE-ID
CVE-2005-4131	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:15780 URL:http://www.securityfocus.com/bid/15780 BUGTRAQ:20060314 High Risk Vulnerability in Microsoft Excel URL:http://www.securityfocus.com/archive/1/427635/100/0/threaded BUGTRAQ:20060315 [HV-HIGH] Microsoft Excel Named Range Arbitrary Code Execution URL:http://www.securityfocus.com/archive/1/427698/100/0/threaded CERT:TA06-073A URL:http://www.us-cert.gov/cas/techalerts/TA06-073A.html CERT-VN:VU#642428 URL:http://www.kb.cert.org/vuls/id/642428 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm MISC:http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538 MISC:http://informationweek.com/story/showArticle.jhtml?articleID=174910198 MISC:http://news.com.com/2061-10789_3-5988086.html MISC:http://news.zdnet.com/2100-1009_22-5989078.html MISC:http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/ MISC:http://www.eweek.com/article2/0,1759,1899697,00.asp?kc=EWRSS03129TX1K0000614 MISC:~~http://www.osvdb.org/blog/?p=71~~ (Obsolete source) MISC:http://www.securityfocus.com/news/11363 MISC:http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html MISC:http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/ MS:MS06-012 URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012 SECTRACK:1015333 URL:http://securitytracker.com/id?1015333 SECTRACK:1015766 URL:http://securitytracker.com/id?1015766 SECUNIA:19138 URL:http://secunia.com/advisories/19138 SECUNIA:19238 URL:http://secunia.com/advisories/19238 SREASON:584 URL:http://securityreason.com/securityalert/584 SREASON:591 URL:http://securityreason.com/securityalert/591 VUPEN:ADV-2006-0950 URL:~~http://www.vupen.com/english/advisories/2006/0950~~ (Obsolete source) XF:excel-msvcrt-memmove-bo(23537) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/23537
Assigning CNA
MITRE Corporation
Date Record Created
20051209	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20051209)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)