CVE-2008-0113: microsoft excel_viewer Code Injection
Vulnerability summary
CVE-2008-0113 is a high (CVSS 9.3) Code Injection vulnerability in microsoft excel_viewer. EPSS estimates a 42.23% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 11-03-2008PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
42.23%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 42.23% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
- excel_viewer2003
1 vendor · 1 product
References
9 links- www.zerodayinitiative.com/advisories/ZDI-08-008X Refsource MISC
- www.us-cert.gov/cas/techalerts/TA08-071A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016Vendor AdvisoryX Refsource MS- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5421VDB EntrySignatureX Refsource OVAL