CVE-2006-3431 CVE-2006-3431

漏洞描述

Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls. NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086.

影响产品

微软公司Microsoft Excel查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2016-7262 CVE-2016-7262 Microsoft Excel	高危	7.8	85.2%	PoCEXP	2016/12/20
CVE-2015-0097RCE CVE-2015-0097 Microsoft Excel Microsoft PowerPoint Microsoft Word	严重	9.3	74.7%	PoCEXP	2015/03/11
CVE-2012-0143RCE CVE-2012-0143 Microsoft-Office-XML Microsoft Excel	严重	9.3	60.6%	PoCEXP	2012/05/09
CVE-2011-0105RCE CVE-2011-0105 Microsoft Excel	严重	9.3	89.4%	PoCEXP	2011/04/13
CVE-2011-0978RCE CVE-2011-0978 Microsoft Excel	严重	9.3	81.4%	PoCEXP	2011/02/10
CVE-2010-0822RCE CVE-2010-0822 Microsoft Excel	严重	9.3	80.4%	PoCEXP	2010/06/08

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞