CVE-2006-1302

CVE-2006-1302 describes a critical buffer overflow vulnerability in Microsoft Excel 2000 through 2003, including Excel Viewer, allowing user-assisted attackers to execute arbitrary code. This flaw, dubbed "Malformed SELECTION record Vulnerability," is triggered by a specially crafted .xls file containing certain fields in a SELECTION record, leading to memory corruption. With a CVSS score of 9.3, it represents a severe risk, as it can be exploited remotely with medium attack complexity, resulting in complete compromise of confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.