← Database

CVE-2008-4265

CRITICAL CVSS: 9.3 Published: 2008-12-10 Modified: 2026-06-16

Description

Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."

Affected Platforms

Microsoft 20007 Office SystemMicrosoft Office Excel ViewerMicrosoft Office Compatibility Pack For Word Excel Ppt 2007Microsoft Open Xml File Format ConverterMicrosoft Office ExcelMicrosoft Office

Weakness Type

CWE-399

References