VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Dec 10, 2008· Updated Apr 23, 2026

CVE-2008-4265

CVE-2008-4265

Description

Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that contains a malformed object, which triggers memory corruption during the loading of records from this spreadsheet, aka "File Format Parsing Vulnerability."

Affected products

11
  • Microsoft/Office Excel3 versions
    cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office_excel:2000:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_excel:2002:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_excel:2003:sp3:*:*:*:*:*:*
  • Microsoft/Office2 versions
    cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*
  • Microsoft/Office Compatibility Pack For Word Excel Ppt 20072 versions
    cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_compatibility_pack_for_word_excel_ppt_2007:*:sp1:*:*:*:*:*:*
  • Microsoft/Office Excel Viewer3 versions
    cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office_excel_viewer:*:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_excel_viewer:2003:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_excel_viewer:2003:sp3:*:*:*:*:*:*
  • Microsoft/Open Xml File Format Converter
    cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.