Vulnerability Details CVE-2008-4265
Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.665
EPSS Ranking 98.4%
CVSS Severity
CVSS v2 Score 9.3
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=763
- http://www.securitytracker.com/id?1021368
- http://www.us-cert.gov/cas/techalerts/TA08-344A.html
- http://www.vupen.com/english/advisories/2008/3386
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-074
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5614
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=763
- http://www.securitytracker.com/id?1021368
- http://www.us-cert.gov/cas/techalerts/TA08-344A.html
- http://www.vupen.com/english/advisories/2008/3386
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-074
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5614
Products affected by CVE-2008-4265
-
cpe:2.3:a:microsoft:20007_office_system:*
-
cpe:2.3:a:microsoft:20007_office_system:sp1
-
cpe:2.3:a:microsoft:office:2000
-
cpe:2.3:a:microsoft:office:2003
-
cpe:2.3:a:microsoft:office:2004
-
cpe:2.3:a:microsoft:office:2008
-
cpe:2.3:a:microsoft:office:xp
-
cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*
-
cpe:2.3:a:microsoft:office_excel:2000
-
cpe:2.3:a:microsoft:office_excel:2002
-
cpe:2.3:a:microsoft:office_excel:2003
-
cpe:2.3:a:microsoft:office_excel:2007
-
cpe:2.3:a:microsoft:office_excel_viewer:-
-
cpe:2.3:a:microsoft:office_excel_viewer:2003
-
cpe:2.3:a:microsoft:open_xml_file_format_converter:-