PT-2004-1908 · Microsoft · Office Excel

Brett Moore · Published 2004-10-16 · Updated 2018-10-12 · CVE-2004-0846

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2000, 2001, 2002, and v.X for Mac

Description: A remote code execution issue exists due to improper validation of certain parameters in malicious files. This allows attackers to execute arbitrary code.

Recommendations: For Microsoft Excel 2000, consider applying security patches or updates to fix the issue. For Microsoft Excel 2001, apply security patches or updates to resolve the problem. For Microsoft Excel 2002, update to a newer version or apply security patches to mitigate the risk. For Microsoft Excel v.X for Mac, apply the latest security patches or updates to fix the vulnerability.

Fix

Related Identifiers

CVE-2004-0846

Affected Products

Office Excel

References · 11

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-033 · Vendor Advisory
• http://ciac.org/ciac/bulletins/p-009.shtml · Vendor Advisory
• http://kb.cert.org/vuls/id/274496 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-0846 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17683 · Note
• http://marc.info/?l=bugtraq&m=109779810827096&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4226 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17653 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2673 · Note
• http://secunia.com/advisories/12800 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0846 · Note