## https://sploitus.com/exploit?id=SAINT:71D72DED04C0A38FA832F0CC1049D695
Added: 03/14/2008
CVE: [CVE-2008-0117](<https://vulners.com/cve/CVE-2008-0117>)
BID: [28170](<http://www.securityfocus.com/bid/28170>)
OSVDB: [42731](<http://www.osvdb.org/42731>)
### Background
Microsoft Excel, part of the [Microsoft Office](<http://office.microsoft.com>) product suite, is a spreadsheet application for Windows and Macintosh platforms.
### Problem
A vulnerability in Microsoft Excel allows command execution when a user opens a file containing specially crafted conditional formatting values.
### Resolution
See [Microsoft Security Bulletin 08-014](<http://www.microsoft.com/technet/security/bulletin/MS08-014.mspx>) for update information.
### References
<http://www.microsoft.com/technet/security/bulletin/MS08-014.mspx>
### Limitations
Exploit works on Microsoft Excel 2002 SP3 and requires a user to open a specially crafted file in Microsoft Excel.
### Platforms
Windows 2000
Windows XP