CVE-2008-3471: Buffer Overflow
Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a BIFF file with a malformed record that triggers a user-influenced size calculation, aka "File Format Parsing Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3471?
CVE-2008-3471 has been classified as a critical vulnerability due to its potential for remote code execution.
What software versions are affected by CVE-2008-3471?
CVE-2008-3471 affects Microsoft Excel versions 2000, 2002, 2003, 2007, as well as various Excel viewer versions and Office Compatibility Packs.
How do I fix CVE-2008-3471?
To fix CVE-2008-3471, users should apply the latest security updates provided by Microsoft for the affected software.
What type of vulnerability is CVE-2008-3471?
CVE-2008-3471 is a stack-based buffer overflow vulnerability.
Can CVE-2008-3471 be exploited remotely?
Yes, CVE-2008-3471 can be exploited remotely if a user opens a malicious Excel file.