CVE-2008-3005

EPSS 60.49%
Published 12.08.2008 23:41:00
Last modified 09.04.2025 00:30:58
Source secure@microsoft.com
Teams watchlist Login
Open Login

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 1 References 12

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Office Version2000 Updatesp3

Microsoft ≫ Office Versionxp Updatesp3

Microsoft ≫ Office Version2004 Editionmac

Microsoft ≫ Office Version2008 Editionmac

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	60.49%	0.981

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://marc.info/?l=bugtraq&m=121915960406986&w=2

http://www.us-cert.gov/cas/techalerts/TA08-225A.html

US Government Resource

http://secunia.com/advisories/31454

Vendor Advisory

http://www.vupen.com/english/advisories/2008/2347

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=741

http://www.securityfocus.com/bid/30639

http://www.securitytracker.com/id?1020671

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5837

https://nvd.nist.gov/vuln/detail/CVE-2008-3005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3005

EUVD