Unrated severityNVD Advisory· Published Aug 12, 2008· Updated Apr 23, 2026

CVE-2008-3005

Description

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."

Affected products

Microsoft/Office4 versions
cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*
- cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/31454nvdVendor Advisory
www.vupen.com/english/advisories/2008/2347nvdVendor Advisory
www.us-cert.gov/cas/techalerts/TA08-225A.htmlnvdUS Government Resource
labs.idefense.com/intelligence/vulnerabilities/display.phpnvd
marc.infonvd
www.securityfocus.com/bid/30639nvd
www.securitytracker.com/idnvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5837nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.044
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000