Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2005-4131

Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed range, which could lead to memory corruption involving an argument to the msvcrt.memmove function, aka "Brand new Microsoft Excel Vulnerability," as originally placed for sale on eBay as item number 7203336538.

  • Published: Dec 9, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2005-4131
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / excel 2002-sp1 2002-sp1.x
microsoft / excel 2003-sp1 2003-sp1.x
microsoft / excel 2000 2000.x
microsoft / excel 95 95.x
microsoft / excel 97-sr1 97-sr1.x
microsoft / excel 97-sr2 97-sr2.x
microsoft / excel 2000-sp3 2000-sp3.x
microsoft / excel 2002 2002.x
microsoft / excel 2002-sp3 2002-sp3.x
microsoft / excel 2003 2003.x
microsoft / excel 2000-sr1 2000-sr1.x
microsoft / excel 97 97.x
microsoft / excel 2002-sp2 2002-sp2.x
microsoft / excel 2000-sp2 2000-sp2.x