CVE-2008-3004

CWE-20 — Improper Input Validation3 documents3 sources
Severity
9.3CRITICAL
EPSS
54.9%
top 1.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft OfficeMicrosoft Office Excel Viewer
Timeline
PublishedAug 12
Latest updateMay 1

Description

Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate index values for AxesSet records when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Indexing Validation Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDmicrosoft/office5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-w4fv-wh95-32j3: Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate i↗2022-05-01
▶
CVEList
CVE-2008-3004: Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate i↗2008-08-12
▶