CVE-2008-0116: Code Injection
Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0116?
CVE-2008-0116 has a critical severity level due to its potential to allow remote code execution.
How do I fix CVE-2008-0116?
To fix CVE-2008-0116, apply the latest security patches provided by Microsoft for affected versions of Excel and Office.
What versions are affected by CVE-2008-0116?
CVE-2008-0116 affects Microsoft Excel 2000 SP3 through 2003 SP2, Excel Viewer 2003, and Office 2004 and 2008 for Mac.
What type of attack does CVE-2008-0116 allow?
CVE-2008-0116 allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text.
Is there a workaround for CVE-2008-0116?
A potential workaround for CVE-2008-0116 includes avoiding opening untrusted rich text files in the affected applications.