CVE-2008-0117

Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."

Affected products

Office Excel, Office

Microsoft Compatibility Pack Word Excel Powerpoint 2007

All versions

Microsoft Excel

= 2000, 2002, 2003, 2007

Microsoft Excel Viewer

= 2003

Microsoft Office

= 2000, 2003, 2004, 2007, 2008, xp

Fix

Available

CVSS 2.0

9.3 HIGH

EPSS

33.4% (98th percentile)

NVD status

Modified

Published

2008-03-11