CVE-2008-0116

Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."

Affected products

Office Excel, Excel Viewer, Office, Office Compatibility Pack

Microsoft Excel

= 2000, 2002, 2003

Microsoft Excel Viewer

= 2003

Microsoft Office

= 2004, 2008

Microsoft Office Compatibility Pack For Word Excel Ppt 2007

All versions

Fix

Available

CVSS 2.0

9.3 HIGH

EPSS

48.2% (99th percentile)

Weakness

CWE-20, CWE-94

NVD status

Modified

Published

2008-03-11