CVE-2008-3006 : Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and S

Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office SharePoint Server 2007 Gold and SP1; and Office 2004 and 2008 for Mac do not properly parse Country record values when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Record Parsing Vulnerability."

Published 2008-08-12 23:41:00

Updated 2018-10-30 16:26:21

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2008-3006

Microsoft » Office » Version: 2000 Update SP3
cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Office » Version: XP Update SP3
cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Office » Version: 2003 Update SP2
cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Office » Version: 2004 MAC Edition
cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*
Matching versions
Microsoft » Office » Version: 2003 Update SP3
cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Office » Version: 2008 MAC Edition
cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*
Matching versions
Microsoft » Office » Version: 2007 Update SP1
cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Office » Version: 2007 Gold Edition
cpe:2.3:a:microsoft:office:2007:*:gold:*:*:*:*:*
Matching versions
Microsoft » Sharepoint Server » Version: 2007 Gold Edition
cpe:2.3:a:microsoft:sharepoint_server:2007:*:gold:*:*:*:*:*
Matching versions
Microsoft » Sharepoint Server » Version: 2007 Update SP1
cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Office Excel Viewer » Version: 2003
cpe:2.3:a:microsoft:office_excel_viewer:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Office Excel Viewer » Version: 2003 Update SP1
cpe:2.3:a:microsoft:office_excel_viewer:2003:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Office Excel Viewer » Version: 2003 Gold Edition
cpe:2.3:a:microsoft:office_excel_viewer:2003:*:gold:*:*:*:*:*
Matching versions
Microsoft » Office Compatibility Pack » Version: 2007 Gold Edition
cpe:2.3:a:microsoft:office_compatibility_pack:2007:*:gold:*:*:*:*:*
Matching versions
Microsoft » Office Compatibility Pack » Version: 2007 Update SP1
cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-3006

EPSS FAQ

92.01%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-3006

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-3006

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-3006

Jump to

Vulnerability Details : CVE-2008-3006

Products affected by CVE-2008-3006

Exploit prediction scoring system (EPSS) score for CVE-2008-3006

CVSS scores for CVE-2008-3006

CWE ids for CVE-2008-3006

References for CVE-2008-3006