CVE-2008-3003: Input Validation

Published Aug 12, 2008

Updated

Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a .xlsx file is configured not to save the remote data session password, which allows local users to obtain sensitive information and obtain access to a remote data source, aka the "Excel Credential Caching Vulnerability."

Affected Software

3 affected components

Microsoft Office=2007-sp1

Microsoft Office=2007

Event History

Aug 12, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3003?

CVE-2008-3003 is classified as a moderate severity vulnerability.

How do I fix CVE-2008-3003?

To fix CVE-2008-3003, ensure you apply the latest security updates from Microsoft for Office 2007 SP1.

Who is affected by CVE-2008-3003?

CVE-2008-3003 affects users of Microsoft Office Excel 2007, specifically Gold and SP1 versions.

What is the impact of CVE-2008-3003?

The impact of CVE-2008-3003 allows local users to access sensitive information related to remote data source passwords.

Is CVE-2008-3003 a remote code execution vulnerability?

No, CVE-2008-3003 is not a remote code execution vulnerability but rather a local information disclosure issue.