CVE Database
/

CVE-2008-3004

Back to search

CVE-2008-3004

Published: Aug 12, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate index values for AxesSet records when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Indexing Validation Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

1020670
vdb-entry
x_refsource_SECTRACK
oval:org.mitre.oval:def:5885
vdb-entry
signature
x_refsource_OVAL
TA08-225A
third-party-advisory
x_refsource_CERT
HPSBST02360
vendor-advisory
x_refsource_HP
SSRT080117
vendor-advisory
x_refsource_HP
MS08-043
vendor-advisory
x_refsource_MS
31454
third-party-advisory
x_refsource_SECUNIA
30638
vdb-entry
x_refsource_BID
ADV-2008-2347
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now