CVE-2006-3431

Microsoft Excel - Buffer Overflow via Crafted STYLE Record

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-3431. PoCs published by Nanika.

AI-analyzed exploit summary The provided text describes a remote code execution vulnerability in Microsoft Excel (CVE-2006-3431), referencing a proof-of-concept exploit named 'Trojan.Hongmosa' and another named 'Nanika.xls'. The vulnerability affects Excel on Simplified Chinese, Traditional Chinese, Japanese, or Korean Windows systems.

Description

Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a crafted STYLE record in a spreadsheet that triggers the overflow when the user attempts to repair the document or selects the "Style" option, as demonstrated by nanika.xls. NOTE: Microsoft has confirmed to CVE via e-mail that this is different than the other Excel vulnerabilities announced before 20060707, including CVE-2006-3059 and CVE-2006-3086.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Nanika · textremotewindows
https://www.exploit-db.com/exploits/28189

The provided text describes a remote code execution vulnerability in Microsoft Excel (CVE-2006-3431), referencing a proof-of-concept exploit named 'Trojan.Hongmosa' and another named 'Nanika.xls'. The vulnerability affects Excel on Simplified Chinese, Traditional Chinese, Japanese, or Korean Windows systems.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Excel (versions affected by CVE-2006-3431)
No auth needed
Prerequisites: Target system running vulnerable version of Microsoft Excel · User interaction to open malicious Excel file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (10)

Core 10
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/439427/100/0/threaded
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/449179/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20268
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A431
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1016430
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=115274676314243&w=2
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/18872
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2689
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/438963/100/0/threaded

Scores

EPSS 0.7297
EPSS Percentile 98.8%

Details

Status published
Products (1)
microsoft/excel
Published Jul 07, 2006
Tracked Since Feb 18, 2026