PT-2008-1768 · Microsoft · Office Excel Viewer 2003+1

Published 2008-03-11 · Updated 2018-10-15 · CVE-2008-0113

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel Viewer 2003 versions up to SP3

Description The issue allows remote attackers to execute arbitrary code via an Excel document with malformed cell comments, triggering memory corruption. This can occur when a user opens a specially crafted Excel file, potentially included as an email attachment or hosted on a compromised website. If successfully exploited, an attacker could gain complete control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with limited account privileges.

Recommendations For Microsoft Office Excel Viewer 2003 versions up to SP3, update to a version later than SP3 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-0113

Affected Products

Office Excel Viewer 2003

Office

References · 13

• 🔥 https://exploit-db.com/exploits/5320 · Exploit
• http://vupen.com/english/advisories/2008/0848/references · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0113 · Security Note
• http://marc.info/?l=bugtraq&m=120585858807305&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0113 · Security Note
• http://secunia.com/advisories/29321 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016 · Vendor Advisory
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-016 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5421 · Note
• http://securityfocus.com/archive/1/489415/100/0/threaded · Note
• http://securitytracker.com/id?1019578 · Note
• http://us-cert.gov/cas/techalerts/TA08-071A.html · Note
• http://zerodayinitiative.com/advisories/ZDI-08-008 · Note