---
title: "CVE-2006-3014\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2006-3014?format=md
keywords: index, follow
---

# CVE-2006-3014

Publication date 22 June 2006

Last updated 17 July 2025

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Microsoft Excel allows user-assisted attackers to execute arbitrary
javascript and redirect users to arbitrary sites via an Excel spreadsheet
with an embedded Shockwave Flash Player ActiveX Object, which is
automatically executed when the user opens the spreadsheet.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| flashplugin-nonfree | 9.10 karmic | Fixed 7.0.68~ubuntu3 |
| 9.04 jaunty | Fixed 7.0.68~ubuntu3 |
| 8.10 intrepid | Fixed 7.0.68~ubuntu3 |
| 8.04 LTS hardy | Fixed 7.0.68~ubuntu3 |
| 7.10 gutsy | Fixed 7.0.68~ubuntu3 |
| 7.04 feisty | Fixed 9.0.48.0.0ubuntu1~7.04.1 |
| 6.10 edgy | Fixed 7.0.68~ubuntu3 |
| 6.06 LTS dapper | Ignored end of life |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3014)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-3014)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-3014)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2006-3014)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2006-3014>