PT-2008-4872 · Microsoft · Office Excel

Joshua J. Drake + 1 · Published 2008-10-14 · Updated 2023-12-07 · CVE-2008-3477

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2000 SP3, 2002 SP3, and 2003 SP2 and SP3

Description The issue arises from improper validation of data in the VBA Performance Cache when processing an Office document with an embedded object. This allows remote attackers to execute arbitrary code via a crafted Excel file, leading to heap-based buffer overflows, integer overflows, array index errors, and memory corruption. A remote code execution vulnerability exists in the way Excel processes a VBA Performance Cache, which could allow an attacker to take complete control of an affected system if a user opens a specially crafted Excel file.

Recommendations For Microsoft Excel 2000 SP3, update to a version that properly validates data in the VBA Performance Cache to prevent remote code execution. For Microsoft Excel 2002 SP3, update to a version that properly validates data in the VBA Performance Cache to prevent remote code execution. For Microsoft Excel 2003 SP2 and SP3, update to a version that properly validates data in the VBA Performance Cache to prevent remote code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-3477

Affected Products

Office Excel

References · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-057 · Vendor Advisory
• http://secunia.com/advisories/32211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3477 · Security Note
• http://securityfocus.com/bid/31702 · Patch
• http://marc.info/?l=bugtraq&m=122479227205998&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3477 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45566 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=746 · Note
• http://vupen.com/english/advisories/2008/2808 · Note
• http://securitytracker.com/id?1021044 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45581 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5870 · Note
• http://us-cert.gov/cas/techalerts/TA08-288A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-057 · Note