CVE-2004-0846: High severity Microsoft Excel vulnerability

Published Oct 16, 2004

Updated

Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.

Affected Software

7 affected components

Microsoft Excel=2000

Microsoft Office=2001

Microsoft Excel=2002

Microsoft Office=v.x

Microsoft Excel=x

Microsoft Excel=2001

Microsoft Office=2000-sp3

Remediation

Patch Available

http://www.kb.cert.org/vuls/id/274496

Event History

Oct 16, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0846?

CVE-2004-0846 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code on affected systems.

How do I fix CVE-2004-0846?

To fix CVE-2004-0846, users should apply the available security patches or upgrades provided by Microsoft for the affected versions of Excel and Office.

Which versions are affected by CVE-2004-0846?

CVE-2004-0846 affects Microsoft Excel 2000, 2002, 2001 for Mac, v.X for Mac, and Microsoft Office 2000 and 2001.

What types of attacks can exploit CVE-2004-0846?

CVE-2004-0846 can be exploited through attacks that involve sending a malicious Excel file containing improperly validated parameters.

Is there a workaround for CVE-2004-0846?

While there may not be a comprehensive workaround, users should avoid opening unknown or suspicious Excel files to mitigate risks associated with CVE-2004-0846.