CVE-2008-0113 Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigge...
HighCVSS 9.3
EPSS 42.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel viewer | = 2003 | No fix listed |
References
- SSRT080028 vendor-advisory
- 29321 third-party-advisory vendor-advisory
- 20080311 ZDI-08-008: Microsoft Excel BIFF File Format Cell Record Parsing Memory Corruption Vulnerability mailing-list
- 1019578 vdb-entry
- TA08-071A third-party-advisory us-government-resource
- ADV-2008-0848 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- MS08-016 vendor-advisory
- oval:org.mitre.oval:def:5421 signature vdb-entry