F-Secure Virus Information Pages: CVE-2006-3059

[Summary] | [Detailed Description] | [Detection]

Name:

CVE-2006-3059

Alias:

Trojan-Dropper.MSExcel.CVE-2006-3059.a, Trojan-Dropper.MSExcel.Tored.e

Type:

Exploit

Category:

Virus

Summary

Microsoft Excel has a vulnerability that allows exection of arbitary code from a specially crafted Excel workbook.

Back to the Top

Detailed Description

Microsoft Excel contains a vulnerability that allows for the execution of arbitrary code in the context of the local user. The exploit occurs when Excel attempts to open and then recover what it thinks is a damaged workbook using the repair mode.

Microsoft has released an advisory about this issue, and it is available at:
http://www.microsoft.com/technet/security/advisory/921365.mspx.

A patch for this vulnerability was released on July 11, 2006. For more details, please see:
http://www.microsoft.com/technet/security/bulletin/ms06-037.mspx.

Back to the Top

Detection

F-Secure Anti-Virus detects this malware with the following updates:

[FSAV_Database_Version]

Version = 2006-06-19_01.

Back to the Top

F-Secure Corporation

Description Index