Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Flash Apsb06 11 | — | Upgrade to Adobe Flash Player version 9.0.16.0 for LinuxUpgrade to Adobe Flash Player version 9.0.16.0 for WindowsUpgrade to Adobe Flash Player version 8.0.24 for Mac OS XUpgrade to Adobe Flash Player version 8.0.24 for LinuxUpgrade to Adobe Flash Player version 8.0.24 for WindowsUpgrade to Adobe Flash Player version 9.0.16.0 for Mac OS X | Nov 19, 2012 | Jun 21, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub