CVE-2006-3875漏洞详情 - SCAP中文社区

CVE-2006-3875

CVSS

5.1

发布时间 :2006-10-10 18:07:00

修订时间 :2011-03-07 21:39:37

NMCOS

[原文]Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867.

[CNNVD]Microsoft Excel COLINFO远程指令执行漏洞(CNNVD-200610-082)

        Microsoft Excel是非常流行的电子表格工具。
        Microsoft Excel在处理文件中畸形COLINFO记录时存在缓冲区溢出漏洞，远程攻击者可能在用户机器上以当前用户权限执行任意指令。
        Microsoft Excel在处理COLINFO记录的某些字段时未进行充分的检查, 因而在进行数据填充操作时可能触发缓冲区溢出，攻击者通过精心构造数据可能导致执行任意指令。攻击者可以创建包含畸形COLINFO记录的Excel文件并通过即时通讯工具或电子邮件等形式诱使用户打开，从而以该用户身份执行任意任意命令。如果该用户是管理员，则攻击者可以完全控制用户所在系统。

NVD
CNNVD
OSVDB
SecurityFocus

- CVSS (基础分值)

CVSS分值:	5.1	[中等(MEDIUM)]
机密性影响:	PARTIAL	[很可能造成信息泄露]
完整性影响:	PARTIAL	[可能会导致系统文件被修改]
可用性影响:	PARTIAL	[可能会导致性能下降或中断资源访问]
攻击复杂度:	HIGH	[漏洞利用存在特定的访问条件]
攻击向量:		[--]
身份认证:	NONE	[漏洞利用无需身份认证]

- CPE (受影响的平台与产品)

cpe:/a:microsoft:excel:x::mac_os_x
cpe:/a:microsoft:excel:2003	Microsoft Excel 2003
cpe:/a:microsoft:excel:2002	Microsoft Excel 2002
cpe:/a:microsoft:excel:2000	Microsoft Excel 2000
cpe:/a:microsoft:excel_viewer:2003	Microsoft Excel Viewer 2003
cpe:/a:microsoft:excel:2004::mac_os_x

- OVAL (用于检测的技术细节)

未找到相关OVAL定义

- 官方数据库链接

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3875 (官方数据源) MITRE
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2006-3875 (官方数据源) NVD
http://www.cnnvd.org.cn/vulnerability/show/cv_cnnvdid/CNNVD-200610-082 (官方数据源) CNNVD

- 其它链接及资源

http://www.kb.cert.org/vuls/id/252500
(UNKNOWN) CERT-VN VU#252500

http://www.microsoft.com/technet/security/Bulletin/MS06-059.mspx
(PATCH) MS MS06-059

http://www.vupen.com/english/advisories/2006/3978
(UNKNOWN) VUPEN ADV-2006-3978

http://www.securityfocus.com/archive/1/archive/1/449179/100/0/threaded
(UNKNOWN) HP SSRT061264

http://www.securityfocus.com/bid/20391
(UNKNOWN) BID 20391

http://www.securityfocus.com/archive/1/archive/1/449179/100/0/threaded
(UNKNOWN) HP HPSBST02161

http://securitytracker.com/id?1017031
(UNKNOWN) SECTRACK 1017031

- 漏洞信息

漏洞名称:Microsoft Excel COLINFO远程指令执行漏洞
紧急程度:中危	漏洞类型:边界条件错误
发布日期:2006-10-10 00:00:00	更新日期:2006-10-16 00:00:00
攻击路径:远程
详细介绍:
Microsoft Excel是非常流行的电子表格工具。 Microsoft Excel在处理文件中畸形COLINFO记录时存在缓冲区溢出漏洞，远程攻击者可能在用户机器上以当前用户权限执行任意指令。 Microsoft Excel在处理COLINFO记录的某些字段时未进行充分的检查, 因而在进行数据填充操作时可能触发缓冲区溢出，攻击者通过精心构造数据可能导致执行任意指令。攻击者可以创建包含畸形COLINFO记录的Excel文件并通过即时通讯工具或电子邮件等形式诱使用户打开，从而以该用户身份执行任意任意命令。如果该用户是管理员，则攻击者可以完全控制用户所在系统。

- 公告与补丁

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：
http://www.microsoft.com/technet/security/Bulletin/MS06-059.mspx

- 漏洞信息

OSVDBID: 29445
漏洞名称:Microsoft Excel Crafted XLS COLINFO Record Arbitrary Code Execution
漏洞位置:	利用方式:
漏洞影响:Loss of Integrity	解决方式:Patch / RCS
漏洞利用:	公开方式:Vendor Verified

- 漏洞描述

- 时间线

公开日期: 2006-10-10	发现日期: Unknow
利用日期:Unknow	解决日期:2006-10-10

- 解决方案

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

- 相关参考

Security Tracker: 1017031
CVE ID: 2006-3875 (see also: NVD)
Related OSVDB ID: 27053 29443 29444
Microsoft Knowledge Base Article: 924164
Microsoft Security Bulletin: MS06-059

- 漏洞作者

Unknown or Incomplete

- 漏洞信息

漏洞名称:Microsoft Excel COLINFO Remote Code Execution Vulnerability
漏洞分类: Boundary Condition Error	BugtraqID: 20391
远程溢出:Yes	本地溢出:No
发布日期:2006-07-10 12:00:00	更新日期:2007-02-20 09:46:00
漏洞作者: NSFocus Security Team is credited with discovering this issue.

- 受影响的程序版本

Microsoft Works Suite 2006 0
Microsoft Works Suite 2005 0
Microsoft Works Suite 2004
Microsoft Office XP SP3
Microsoft Office v. X
Microsoft Office 2004 for Mac 0
Microsoft Office 2003 SP2
Microsoft Office 2003 SP1
Microsoft Office 2000 SP3
Microsoft Excel x for Mac 0
Microsoft Excel Viewer 2003 0
Microsoft Excel 2004 for Mac 0
Microsoft Excel 2003 SP2
Microsoft Excel 2003 SP1
Microsoft Excel 2003
Microsoft Excel 2002 SP3
Microsoft Excel 2002 SP2
Microsoft Excel 2002 SP1
Microsoft Excel 2002
Microsoft Excel 2000 SR1
Microsoft Excel 2000 SP3
Microsoft Excel 2000 SP2
Microsoft Excel 2000

- 漏洞讨论

Microsoft Excel is prone to a remote code-execution vulnerability.

A remote attacker may exploit this issue to execute arbitrary machine code in the context of the user running the application.

Note that Microsoft Office applications include functionality to embed Office files as objects contained in other Office files. As an example, Word files may contain embedded malicious Excel files, making Word documents another possible attack vector.

- 漏洞利用

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com