CVE-2006-1309
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption.
Date published : 2006-07-13
http://www.securityfocus.com/bid/18910
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037