CVE-2008-3471: microsoft excel Out-of-bounds Write

Vulnerability summary

CVE-2008-3471 is a high (CVSS 9.3) Out-of-bounds Write vulnerability in microsoft excel. EPSS estimates a 52.32% chance of exploitation in the next 30 days, higher than 98.9% of scored vulnerabilities.

Timeline

1. 15-10-2008
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a BIFF file with a malformed record that triggers a user-influenced size calculation, aka "File Format Parsing Vulnerability."

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.