Spoofing

2008-08-1223:41:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.741 High

EPSS

Percentile

98.0%

JSON

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office SharePoint Server 2007 Gold and SP1; and Office 2004 and 2008 for Mac do not properly parse Country record values when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the “Excel Record Parsing Vulnerability.”

CPENameOperatorVersion
officeeqxp sp3
officeeq2003 sp2
officeeq2007 sp1
officeeq2007 gold
officeeq2003 sp3
officeeq2000 sp3
officeeq2008 mac
officeeq2004 mac
office_compatibility_packeq2007 gold
office_compatibility_packeq2007 sp1

Name	Operator	Version
office	eq	xp sp3
office	eq	2003 sp2
office	eq	2007 sp1
office	eq	2007 gold
office	eq	2003 sp3
office	eq	2000 sp3
office	eq	2008 mac
office	eq	2004 mac
office_compatibility_pack	eq	2007 gold
office_compatibility_pack	eq	2007 sp1