vulnwire
6.8med

CVE-2005-41311 exploit

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted at…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
31.1%
percentile 98%
Public exploits
1
Exploit-DB

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.

Exploit prediction (EPSS)

31.11% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-26769 Microsoft Excel 95/97/2000/2002/2003/2004 - Malformed Range Memory Corruption · dos · 2005-12-08

CVSS scores

Assigned byVersionScoreVector
NVD2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/23537 · vdb-entry, x_refsource_XF, x_transferred
  • cgi.ebay.com /ws/eBayISAPI.dll?ViewItem&item=7203336538 · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/15780 · vdb-entry, x_refsource_BID, x_transferred
  • eweek.com /article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K0000614 · x_refsource_MISC, x_transferred
  • securityreason.com /securityalert/584 · third-party-advisory, x_refsource_SREASON, x_transferred
  • informationweek.com /story/showArticle.jhtml?articleID=174910198 · x_refsource_MISC, x_transferred
  • vupen.com /english/advisories/2006/0950 · vdb-entry, x_refsource_VUPEN, x_transferred
  • news.zdnet.com /2100-1009_22-5989078.html · x_refsource_MISC, x_transferred
  • theage.com.au /news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12/09/1134086783318.html · x_refsource_MISC, x_transferred
  • support.avaya.com /elmodocs2/security/ASA-2006-069.htm · x_refsource_CONFIRM, x_transferred
  • securityreason.com /securityalert/591 · third-party-advisory, x_refsource_SREASON, x_transferred
  • secunia.com /advisories/19238 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • theregister.co.uk /2005/12/10/ebay_pulls_excel_vulnerability_auction/ · x_refsource_MISC, x_transferred
  • us-cert.gov /cas/techalerts/TA06-073A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • secunia.com /advisories/19138 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • osvdb.org /blog/?p=71 · x_refsource_MISC, x_transferred
  • securitytracker.com /id?1015333 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • securityfocus.com /archive/1/427635/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • dicks-blog.com /archives/2005/12/08/excel-vulnerability-for-sale/ · x_refsource_MISC, x_transferred
  • securitytracker.com /id?1015766 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • kb.cert.org /vuls/id/642428 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • securityfocus.com /archive/1/427698/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /news/11363 · x_refsource_MISC, x_transferred
  • news.com.com /2061-10789_3-5988086.html · x_refsource_MISC, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2006/ms06-012 · vendor-advisory, x_refsource_MS, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.