CVE-2008-4265

CWE-3993 documents3 sources

Severity

9.3CRITICAL

EPSS

62.5%

top 1.63%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Office Microsoft Office Excel Microsoft Office Excel Viewer

Timeline

PublishedDec 10

Latest updateMay 2

Description

Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDmicrosoft/office_excel2000, 2002, 2003+2

▶NVDmicrosoft/office_excel_viewer2003

▶NVDmicrosoft/office2004, 2008+1

🔴Vulnerability Details

GHSA

GHSA-x5pp-pmr4-95cm: Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, wh↗2022-05-02

▶

CVEList

CVE-2008-4265: Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, wh↗2008-12-10

▶