CVE-2008-0115
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 39.3%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 39.33% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- microsoft/excel · microsoft/excel viewer · microsoft/office · microsoft/office compatibility pack for word excel ppt 2007
- Source
- secure@microsoft.com
References
- http://marc.info/?l=bugtraq&m=120585858807305&w=2
- http://www.securityfocus.com/bid/28167Patch
- http://www.securitytracker.com/id?1019585
- http://www.us-cert.gov/cas/techalerts/TA08-071A.htmlPatch, US Government Resource
- http://www.vupen.com/english/advisories/2008/0846/references
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5512
- http://marc.info/?l=bugtraq&m=120585858807305&w=2
- http://www.securityfocus.com/bid/28167Patch
- http://www.securitytracker.com/id?1019585
- http://www.us-cert.gov/cas/techalerts/TA08-071A.htmlPatch, US Government Resource
- http://www.vupen.com/english/advisories/2008/0846/references
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5512
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.