CVE-2008-0111

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."

Affected products

Office Excel, Excel Viewer, Office, Office Compatibility Pack

Microsoft Excel

= 2000, 2002, 2003

Microsoft Excel Viewer

= 2003

Microsoft Office

= 2004, 2007

Microsoft Office Compatibility Pack For Word Excel Ppt 2007

All versions

Fix

Available

CVSS 2.0

9.3 HIGH

EPSS

50.9% (99th percentile)

Weakness

CWE-94

NVD status

Modified

Published

2008-03-11