CVE-2006-7037
- State
- Published
- Severity
- Not scored
- Published
- Feb 23, 2007
- Updated
- Aug 7, 2024
- Reserved
- Feb 22, 2007
Description
Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to (1) bypass password protection by replacing the password field with a hash of a known password, (2) modify timestamps to avoid detection of modifications, (3) remove locks by removing the "is-locked" attribute, and (4) view locked data, which is stored in plaintext.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- mathcad-locked-area-security-bypass(27118)vdb-entry
- 2305third-party-advisory
- mathcad-timestamp-security-bypass(27116)vdb-entry
- mathcad-area-password-security-bypass(27115)vdb-entry
- 20060608 Mathcad Area Lock Vulnerabilitymailing-list
- mathcad-islocked-security-bypass(27117)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.