VULNERABILITY INTELLIGENCE
CVE-2006-3014
CVSS score5.1 MEDIUM
EPSS probability30.10%
CISA KEVNot currently listed
Published2006-06-22
Last modified2026-09-23
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org — Exploit
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Exploit
- cve@mitre.org — Patch
- cve@mitre.org — US Government Resource
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory