CVE-2008-0112: Code Injection
Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0112?
CVE-2008-0112 has been classified as having a medium severity, allowing potential execution of arbitrary code.
How do I fix CVE-2008-0112?
To mitigate CVE-2008-0112, users should ensure they are using the latest updates or patches for Microsoft Excel 2000 and Office for Mac 2004 and 2008.
What platforms are affected by CVE-2008-0112?
CVE-2008-0112 affects Microsoft Excel 2000 SP3, Microsoft Office for Mac 2004, and Microsoft Office for Mac 2008.
What type of attack does CVE-2008-0112 enable?
CVE-2008-0112 enables user-assisted remote attackers to execute arbitrary code via a malicious .SLK file.
Is user interaction required for CVE-2008-0112 to be exploited?
Yes, exploitation of CVE-2008-0112 requires user interaction to open the crafted .SLK file.