CVE-2008-3005
Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 31.9%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 31.93% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- microsoft/office
- Source
- secure@microsoft.com
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=741
- http://marc.info/?l=bugtraq&m=121915960406986&w=2
- http://secunia.com/advisories/31454Vendor Advisory
- http://www.securityfocus.com/bid/30639
- http://www.securitytracker.com/id?1020671
- http://www.us-cert.gov/cas/techalerts/TA08-225A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/2347Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5837
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=741
- http://marc.info/?l=bugtraq&m=121915960406986&w=2
- http://secunia.com/advisories/31454Vendor Advisory
- http://www.securityfocus.com/bid/30639
- http://www.securitytracker.com/id?1020671
- http://www.us-cert.gov/cas/techalerts/TA08-225A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/2347Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5837
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.