Vulnerability in Microsoft 20007_office_system
CVE-2008-4265
Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "…
EPSS: 0.246 (97.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft 20007_office_system — versions sp1
- Microsoft Office — versions 2000, 2003, xp
- Microsoft Office_compatibility_pack_for_word_excel_ppt_2007
- Microsoft Office_excel — versions 2000, 2002, 2003
- Microsoft Office_excel_viewer — versions 2003
- Microsoft Open_xml_file_format_converter
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)
- secure@microsoft.com (x_refsource_IDEFENSE, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)