CVE-2005-4131
- State
- Published
- Severity
- Not scored
- Published
- Dec 9, 2005
- Updated
- Aug 7, 2024
- Reserved
- Dec 9, 2005
Description
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- excel-msvcrt-memmove-bo(23537)vdb-entry
- http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538
- 15780vdb-entry
- http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614
- 584third-party-advisory
- http://informationweek.com/story/showArticle.jhtml?articleID=174910198
- ADV-2006-0950vdb-entry
- http://news.zdnet.com/2100-1009_22-5989078.html
- http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html
- http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm
- 591third-party-advisory
- 19238third-party-advisory
- http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/
- TA06-073Athird-party-advisory
- 19138third-party-advisory
- http://www.osvdb.org/blog/?p=71
- 1015333vdb-entry
- 20060314 High Risk Vulnerability in Microsoft Excelmailing-list
- http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/
- 1015766vdb-entry
- VU#642428third-party-advisory
- 20060315 [HV-HIGH] Microsoft Excel Named Range Arbitrary Code Executionmailing-list
- http://www.securityfocus.com/news/11363
- http://news.com.com/2061-10789_3-5988086.html
- MS06-012vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.