9.3

CVE-2008-4265

Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Office Excel Version2000 Updatesp3
   Microsoft ≫ Office Excel Version2007
   Microsoft ≫ Office Excel Version2007 Updatesp1
   Microsoft ≫ 20007 Office System
   Microsoft ≫ 20007 Office System Versionsp1
   Microsoft ≫ Office Version2000 Updatesp3
   Microsoft ≫ Office Version2003 Updatesp3
   Microsoft ≫ Office Versionxp Updatesp3
Microsoft ≫ Office Excel Version2002 Updatesp3
   Microsoft ≫ Office Excel Version2007
   Microsoft ≫ Office Excel Version2007 Updatesp1
   Microsoft ≫ 20007 Office System
   Microsoft ≫ 20007 Office System Versionsp1
   Microsoft ≫ Office Version2000 Updatesp3
   Microsoft ≫ Office Version2003 Updatesp3
   Microsoft ≫ Office Versionxp Updatesp3
Microsoft ≫ Office Excel Version2003 Updatesp3
   Microsoft ≫ Office Excel Version2007
   Microsoft ≫ Office Excel Version2007 Updatesp1
   Microsoft ≫ 20007 Office System
   Microsoft ≫ 20007 Office System Versionsp1
   Microsoft ≫ Office Version2000 Updatesp3
   Microsoft ≫ Office Version2003 Updatesp3
   Microsoft ≫ Office Versionxp Updatesp3
Microsoft ≫ Office Version2004 Editionmac
Microsoft ≫ Office Version2008 Editionmac
Microsoft ≫ Office Excel Viewer Version2003
Microsoft ≫ Office Excel Viewer Version2003 Updatesp3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 62.48% 0.983
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C