VULNERABILITY INTELLIGENCE

CVE-2008-3005

CVSS score9.3 HIGH
EPSS probability31.93%
CISA KEVNot currently listed
Published2008-08-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references