PT-2008-1770 · Microsoft · Office For Mac+3

Published 2008-03-11 · Updated 2018-10-12 · CVE-2008-0115

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2000 SP3 through 2007 Microsoft Excel Viewer 2003 Microsoft Office Compatibility Pack Microsoft Office for Mac 2004

Description The issue allows user-assisted remote attackers to execute arbitrary code via malformed formulas. A remote code execution vulnerability exists in the way Excel handles malformed formulas. An attacker could exploit the issue by sending a malformed file, which could be hosted on a specially crafted or compromised Web site, or included as an e-mail attachment.

Recommendations For Microsoft Excel versions 2000 SP3 through 2007, consider avoiding the use of malformed formulas until a patch is available. For Microsoft Excel Viewer 2003, restrict access to malformed files to minimize the risk of exploitation. For Microsoft Office Compatibility Pack, avoid using the pack with malformed files until the issue is resolved. For Microsoft Office for Mac 2004, consider disabling the handling of malformed formulas as a temporary workaround until a patch is available.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-0115

Affected Products

Office Excel

Excel Viewer

Office Compatibility Pack

Office For Mac

References · 12

• 🔥 https://exploit-db.com/exploits/5287 · Exploit
• http://marc.info/?l=bugtraq&m=120585858807305&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0115 · Security Note
• http://us-cert.gov/cas/techalerts/TA08-071A.html · Patch
• http://securityfocus.com/bid/28167 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0115 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5512 · Note
• http://securitytracker.com/id?1019585 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-014 · Note
• http://vupen.com/english/advisories/2008/0846/references · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0115 · Note