CVE-2008-0118: Code Injection
Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation error," aka "Microsoft Office Memory Corruption Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0118?
CVE-2008-0118 is considered critical due to potential for remote code execution.
How do I fix CVE-2008-0118?
To fix CVE-2008-0118, apply the latest security updates provided by Microsoft for the affected versions of Office.
What versions of Microsoft Office are affected by CVE-2008-0118?
CVE-2008-0118 affects Microsoft Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac.
What type of vulnerability is CVE-2008-0118?
CVE-2008-0118 is a memory corruption vulnerability that can be exploited through crafted Office documents.
Can CVE-2008-0118 be exploited without user interaction?
CVE-2008-0118 requires user interaction, as it relies on the user opening a malicious Office document.