Unrated severityNVD Advisory· Published Aug 12, 2008· Updated Jun 16, 2026

CVE-2008-3005

Description

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Office4 versions
cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*
- cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
Microsoft/Office Excelllm-fuzzy
Range: 2000 SP3, 2002 SP3, 2004, 2008

Patches

Vulnerability mechanics

References

secunia.com/advisories/31454nvdVendor Advisory
www.vupen.com/english/advisories/2008/2347nvdVendor Advisory
www.us-cert.gov/cas/techalerts/TA08-225A.htmlnvdUS Government Resource
labs.idefense.com/intelligence/vulnerabilities/display.phpnvd
marc.infonvd
www.securityfocus.com/bid/30639nvd
www.securitytracker.com/idnvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-043nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5837nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.026
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000