PT-2008-4438 · Microsoft · Office Excel 2000+10

Published 2008-08-12 · Updated 2018-10-30 · CVE-2008-3006

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel 2000 SP3 Microsoft Office Excel 2002 SP3 Microsoft Office Excel 2003 SP2 and SP3 Microsoft Office Excel 2007 Gold and SP1 Microsoft Office Excel Viewer 2003 Gold and SP3 Microsoft Office Compatibility Pack 2007 Gold and SP1 Microsoft Office SharePoint Server 2007 Gold and SP1 Microsoft Office 2004 and 2008 for Mac

Description A vulnerability exists in the way Excel parses record values when loading Excel files into memory. Depending on the attack scenario, the vulnerability could lead to remote code execution on a user's local Excel client, or it could lead to elevation of privilege within a SharePoint Server. An attacker could exploit the vulnerability by convincing a user to open a specially crafted file, which could be hosted on a Web site or included as an e-mail attachment. In an attack against a SharePoint site, an attacker would first need an account on the SharePoint site with sufficient rights to upload a specially crafted Excel file and then create a web part using the file on the SharePoint site.

Recommendations For Microsoft Office Excel 2000 SP3, update to a newer version to mitigate the risk. For Microsoft Office Excel 2002 SP3, update to a newer version to mitigate the risk. For Microsoft Office Excel 2003 SP2 and SP3, update to a newer version to mitigate the risk. For Microsoft Office Excel 2007 Gold and SP1, update to a newer version to mitigate the risk. For Microsoft Office Excel Viewer 2003 Gold and SP3, update to a newer version to mitigate the risk. For Microsoft Office Compatibility Pack 2007 Gold and SP1, update to a newer version to mitigate the risk. For Microsoft Office SharePoint Server 2007 Gold and SP1, update to a newer version to mitigate the risk. For Microsoft Office 2004 and 2008 for Mac, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to specially crafted Excel files until a patch is available. Avoid opening suspicious files from untrusted sources to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-3006

Affected Products

Office 2004

Office 2008

Office Compatibility Pack 2007

Office Excel 2000

Office Excel 2002

Office Excel 2003

Office Excel 2007

Office Excel Viewer 2003

Office Sharepoint Server 2007

Office Excel

Sharepoint Server

References · 15

• http://secunia.com/advisories/31454 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3006 · Security Note
• http://secunia.com/advisories/31455 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043 · Vendor Advisory
• http://vupen.com/english/advisories/2008/2347 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3006 · Security Note
• http://marc.info/?l=bugtraq&m=121915960406986&w=2 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-08-048 · Note
• http://us-cert.gov/cas/techalerts/TA08-225A.html · Note
• http://securitytracker.com/id?1020672 · Note
• http://securityfocus.com/archive/1/495428/100/0/threaded · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-043 · Note
• http://securityfocus.com/bid/30640 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5561 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3006 · Note