NVD

Id
2899  
Name
CVE-2008-3006  
Description
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold and SP1; Office SharePoint Server 2007 Gold and SP1; and Office 2004 and 2008 for Mac do not properly parse Country record values when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Record Parsing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-08-12  
Modified Date
2011-09-27  
Seq
2008-3006  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18355 2899 CVE-2008-3006 SSRT080117  View
18356 2899 CVE-2008-3006 oval:org.mitre.oval:def:5561  View
18357 2899 CVE-2008-3006 MS08-043  View
18358 2899 CVE-2008-3006 20080812 ZDI-08-048: Microsoft Excel COUNTRY Record Memory Corruption Vulnerability  View
18359 2899 CVE-2008-3006 30640  View
18360 2899 CVE-2008-3006 1020672  View
18361 2899 CVE-2008-3006 TA08-225A  View
18362 2899 CVE-2008-3006 ADV-2008-2347  View
18363 2899 CVE-2008-3006 http://www.zerodayinitiative.com/advisories/ZDI-08-048/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46328 JVNDB-2008-001638 Microsoft Office Excel の Excel ファイル読込時の検証処理における任意のコードを実行される脆弱性 Microsoft Office Excel には、Excel ファイルを読み込む際のレコード値の構文解析処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-3006 33119 CVE-2008-3006 2899 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001638.html 2008-08-12 2008-09-09 View