Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-0117

Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."

Published

2008-03-11T23:44:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft compatibility_pack_word_excel_powerpoint_2007 * Yes
Application microsoft excel 2000 Yes
Application microsoft excel 2002 Yes
Application microsoft excel 2003 Yes
Application microsoft excel 2007 Yes
Application microsoft excel_viewer 2003 Yes
Application microsoft office 2000 Yes
Application microsoft office 2003 Yes
Application microsoft office 2004 Yes
Application microsoft office 2007 Yes
Application microsoft office 2008 Yes
Application microsoft office xp Yes
References