CVE-2006-7037

N/A

Published: February 23, 2007 at 01:00 AM UTC

Updated: June 16, 2026 at 10:34 PM UTC

1 product affected across 1 vendorMathcad· also runs on 8 platforms

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.3%

Description

Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the worksheet with a text editor or other program, which allows attackers to (1) bypass password protection by replacing the password field with a hash of a known password, (2) modify timestamps to avoid detection of modifications, (3) remove locks by removing the "is-locked" attribute, and (4) view locked data, which is stored in plaintext.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Mathcad · Mathsoft

95%

12 13 13.1

microsoft-windows-2000 (environment) · microsoft-windows-2003-server (environment) · microsoft-windows-95 (environment) · microsoft-windows-98 (environment) · microsoft-windows-98se (environment) · microsoft-windows-me (environment) · microsoft-windows-nt (environment) · microsoft-windows-xp (environment)