CVE-2008-3006: Critical severity microsoft office viewer vulnerability
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office SharePoint Server 2007 Gold and SP1; and Office 2004 and 2008 for Mac do not properly parse Country record values when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Record Parsing Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3006?
CVE-2008-3006 has a CVSS base score of 7.5, indicating it is a high-severity vulnerability.
How do I fix CVE-2008-3006?
To fix CVE-2008-3006, install the latest security updates for your affected Microsoft Office software.
What versions of Microsoft Office are affected by CVE-2008-3006?
CVE-2008-3006 affects Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1, as well as Office Viewer and Compatibility Packs.
What type of vulnerability is CVE-2008-3006?
CVE-2008-3006 is a remote code execution vulnerability due to improper parsing of file formats.
Is there a workaround for CVE-2008-3006?
As a workaround for CVE-2008-3006, consider restricting access to untrusted files or avoiding the use of the affected Office versions until patches are applied.