Executive Summary

Informations
Name CVE-2005-4131 First vendor Publication 2005-12-09
Vendor Cve Last vendor Modification 2023-11-07

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score 6.8 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4131

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 14

ExploitDB Exploits

id Description
2005-12-19 Microsoft Excel 95/97/2000/2002/2003/2004 Unspecified Memory Corruption Vulne...

Open Source Vulnerability Database (OSVDB)

Id Description
21568 Microsoft Excel xls Processing msvcrt.memmove() Function Malformed Range Over...

Snort® IPS/IDS

Date Description
2014-11-16 Microsoft Office Excel malformed file format parsing code execution attempt
RuleID : 32083 - Revision : 4 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel Malformed Range Code Execution attempt
RuleID : 24269 - Revision : 7 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel Malformed Range Code Execution attempt
RuleID : 24268 - Revision : 7 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel Malformed Range Code Execution attempt
RuleID : 24267 - Revision : 8 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel malformed graphic record code execution attempt
RuleID : 23150 - Revision : 6 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel Malformed Range Code Execution attempt
RuleID : 17488 - Revision : 19 - Type : FILE-OFFICE
2014-01-10 Microsoft Office Excel malformed file format parsing code execution attempt
RuleID : 16059 - Revision : 17 - Type : FILE-OFFICE

Nessus® Vulnerability Scanner

Date Description
2006-03-14 Name : Arbitrary code can be executed on the remote host through Microsoft Office.
File : smb_nt_ms06-012.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://www.eweek.com/article2/0%2C1759%2C1899697%2C00.asp?kc=EWRSS03129TX1K00...
Source Url
BID http://www.securityfocus.com/bid/15780
BUGTRAQ http://www.securityfocus.com/archive/1/427635/100/0/threaded
http://www.securityfocus.com/archive/1/427698/100/0/threaded
CERT http://www.us-cert.gov/cas/techalerts/TA06-073A.html
CERT-VN http://www.kb.cert.org/vuls/id/642428
CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm
MISC http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=7203336538
http://informationweek.com/story/showArticle.jhtml?articleID=174910198
http://news.com.com/2061-10789_3-5988086.html
http://news.zdnet.com/2100-1009_22-5989078.html
http://www.dicks-blog.com/archives/2005/12/08/excel-vulnerability-for-sale/
http://www.osvdb.org/blog/?p=71
http://www.securityfocus.com/news/11363
http://www.theage.com.au/news/breaking/excel-flaw-up-for-sale-on-ebay/2005/12...
http://www.theregister.co.uk/2005/12/10/ebay_pulls_excel_vulnerability_auction/
MS https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06...
SECTRACK http://securitytracker.com/id?1015333
http://securitytracker.com/id?1015766
SECUNIA http://secunia.com/advisories/19138
http://secunia.com/advisories/19238
SREASON http://securityreason.com/securityalert/584
http://securityreason.com/securityalert/591
VUPEN http://www.vupen.com/english/advisories/2006/0950
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/23537

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
Date Informations
2023-11-07 21:48:06
  • Multiple Updates
2021-05-04 12:03:25
  • Multiple Updates
2021-04-22 01:03:42
  • Multiple Updates
2020-05-23 00:17:05
  • Multiple Updates
2018-10-19 21:19:42
  • Multiple Updates
2018-10-13 00:22:32
  • Multiple Updates
2017-07-20 09:23:14
  • Multiple Updates
2016-06-28 15:27:55
  • Multiple Updates
2016-04-26 14:02:04
  • Multiple Updates
2014-02-17 10:33:48
  • Multiple Updates
2014-01-19 21:23:00
  • Multiple Updates
2013-05-11 11:36:26
  • Multiple Updates