Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-0028 Details

Description

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012	CVE
http://secunia.com/advisories/19138	CVE	PatchVendor Advisory
http://secunia.com/advisories/19238	CVE	Vendor Advisory
http://securityreason.com/securityalert/583	CVE
http://securitytracker.com/id?1015766	CVE	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25225	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1158	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1509	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1635	CVE
http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm	CVE
http://www.kb.cert.org/vuls/id/339878	CVE	Third Party AdvisoryUS Government Resource
http://www.osvdb.org/23899	CVE
http://www.securityfocus.com/archive/1/427632/100/0/threaded	CVE
http://www.us-cert.gov/cas/techalerts/TA06-073A.html	CVE	Third Party AdvisoryUS Government Resource
http://www.vupen.com/english/advisories/2006/0950	CVE	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-004.html	CVE
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012	[email protected]
http://secunia.com/advisories/19138	[email protected]	PatchVendor Advisory
http://secunia.com/advisories/19238	[email protected]	Vendor Advisory
http://securityreason.com/securityalert/583	[email protected]
http://securitytracker.com/id?1015766	[email protected]	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/25225	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1158	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1509	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1635	[email protected]
http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm	[email protected]
http://www.kb.cert.org/vuls/id/339878	[email protected]	Third Party AdvisoryUS Government Resource
http://www.osvdb.org/23899	[email protected]
http://www.securityfocus.com/archive/1/427632/100/0/threaded	[email protected]
http://www.us-cert.gov/cas/techalerts/TA06-073A.html	[email protected]	Third Party AdvisoryUS Government Resource
http://www.vupen.com/english/advisories/2006/0950	[email protected]	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-004.html	[email protected]

see all 34 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
microsoft excel	2000 2002 2003 2004 x
CPE cpe:2.3:a:microsoft:excel:2000:::::::* cpe:2.3:a:microsoft:excel:2002:::::::* cpe:2.3:a:microsoft:excel:2003:::::::* cpe:2.3:a:microsoft:excel:2004::mac_os_x::::: cpe:2.3:a:microsoft:excel:x::mac_os_x::::: Remediation No remediation found in references.
microsoft office	2000 sp3 2003 sp1 2003 sp2 2004 v.x
CPE cpe:2.3:a:microsoft:office:2000:sp3:::::: cpe:2.3:a:microsoft:office:2003:sp1:::::: cpe:2.3:a:microsoft:office:2003:sp2:::::: cpe:2.3:a:microsoft:office:2004::mac::::: cpe:2.3:a:microsoft:office:v.x::mac::::: cpe:2.3:a:microsoft:office:xp:sp3:::::: Remediation No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 19, 2018	CVE Modified	[email protected]
Oct 12, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
Mar 16, 2006	Initial Analysis	[email protected]