CVEvulnerability

CVE-2008-3005

9.3 HIGH Published 2008-08-12 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-08-12
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."

Affected configurations

• microsoft office 2000 • microsoft office xp • microsoft office 2004 • microsoft office 2008

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References