CVE-2008-0113: Code Injection
First published: Tue Mar 11 2008(Updated: )
Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office Excel Viewer | =2003 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.us-cert.gov/cas/techalerts/TA08-071A.html
- http://secunia.com/advisories/29321
- http://www.securitytracker.com/id?1019578
- http://www.zerodayinitiative.com/advisories/ZDI-08-008
- http://marc.info/?l=bugtraq&m=120585858807305&w=2
- http://www.vupen.com/english/advisories/2008/0848/references
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5421
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016
- http://www.securityfocus.com/archive/1/489415/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2008-0113?
CVE-2008-0113 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2008-0113?
To fix CVE-2008-0113, users should update Microsoft Office Excel Viewer 2003 to the latest service pack.
What systems are affected by CVE-2008-0113?
CVE-2008-0113 affects Microsoft Excel Viewer 2003, specifically versions up to SP3.
What type of attack is associated with CVE-2008-0113?
CVE-2008-0113 is associated with user-assisted attacks, where the victim opens a manipulated Excel document.
What could happen if CVE-2008-0113 is exploited?
If exploited, CVE-2008-0113 could allow attackers to execute arbitrary code on the affected system.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft office excel viewer
- version/microsoft office excel viewer/2003