PT-2008-1736 · Microsoft · Office Excel+2

Published 2008-01-16 · Updated 2025-01-17 · CVE-2008-0081

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2000 SP3 through 2003 SP2 Microsoft Excel Viewer 2003 Microsoft Office 2004 for Mac

Description The issue allows user-assisted remote attackers to execute arbitrary code via crafted macros. A remote code execution vulnerability exists in the way Excel handles macros when opening specially crafted Excel files. An attacker could exploit the vulnerability by sending a malformed file which could be hosted on a specially crafted or compromised Web site, or included as an e-mail attachment.

Recommendations For Microsoft Excel versions 2000 SP3 through 2003 SP2, consider disabling macro execution until a patch is available. For Microsoft Excel Viewer 2003, restrict access to specially crafted Excel files to minimize the risk of exploitation. For Microsoft Office 2004 for Mac, avoid opening Excel files from untrusted sources until the issue is resolved.

Exploit

Fix

RCE

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2008-0081

Affected Products

Office Excel

Excel Viewer

Office

References · 18

• 🔥 https://exploit-db.com/exploits/5287 · Exploit
• http://marc.info/?l=bugtraq&m=120585858807305&w=2 · Vendor Advisory
• http://vupen.com/english/advisories/2008/0846/references · Vendor Advisory
• http://secunia.com/advisories/28506 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0081 · Security Note
• http://microsoft.com/technet/security/advisory/947563.mspx · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014 · Vendor Advisory
• http://vupen.com/english/advisories/2008/0146 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0081 · Security Note
• http://securityfocus.com/bid/27305 · Patch
• http://securitytracker.com/id?1019200 · Note
• https://t.me/cvenotify/107773 · Telegram Post
• https://t.me/cvenotify/70689 · Telegram Post
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-014 · Note
• http://us-cert.gov/cas/techalerts/TA08-071A.html · Note