CVE-2008-3005

2008-08-1223:41:00

CWE-20

[email protected]

web.nvd.nist.gov

microsoft office

excel

remote code execution

vulnerability

cve-2008-3005

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.575 Medium

EPSS

Percentile

97.7%

JSON

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the “Excel Index Array Vulnerability.”

CPENameOperatorVersion
microsoft:officemicrosoft officeeqxp
microsoft:officemicrosoft officeeq2000
microsoft:officemicrosoft officeeq2008
microsoft:officemicrosoft officeeq2004

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	xp
microsoft:office	microsoft office	eq	2000
microsoft:office	microsoft office	eq	2008
microsoft:office	microsoft office	eq	2004