CVE-2006-0028
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3...
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
- Record
CVE-2006-0028- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
- Record
CVE-2006-0028- Updated
- 2026-11-02
EUVDEUVD-2006-0036 No score
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
- Record
EUVD-2006-0036- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c3qv-56cw-76xq No score
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3...
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via a BIFF parsing format file containing malformed BOOLERR records that lead to memory corruption, probably involving invalid pointers.
- Record
GHSA-c3qv-56cw-76xq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0028 is a medium vulnerability (CVSS 5.1) in Microsoft Excel, published March 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.2%, the 96th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2006/0950
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1411
securityreason.com/securityalert/583
support.avaya.com/elmodocs2/security/ASA-2006-069.htm
Show 13 moreShow less
secunia.com/advisories/19238
kb.cert.org/vuls/id/339878
us-cert.gov/cas/techalerts/TA06-073A.html
securityfocus.com/archive/1/427632/100/0/threaded
securitytracker.com/id?1015766
osvdb.org/23899
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012
exchange.xforce.ibmcloud.com/vulnerabilities/25225
zerodayinitiative.com/advisories/ZDI-06-004.html
nvd.nist.gov/vuln/detail/CVE-2006-0028
github.com/advisories/GHSA-c3qv-56cw-76xq