Oval Definition:	oval:org.mitre.oval:def:5808
Revision Date: 2014-06-30 Version: 9 Title: Excel Global Array Memory Corruption Vulnerability Description: Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Excel spreadsheet with a NAME record that contains an invalid index value, which triggers stack corruption, aka "Excel Global Array Memory Corruption Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-4266 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Excel 2000 Microsoft Excel 2002 Microsoft Excel 2003 Microsoft Office Excel Viewer 2003 Definition Synopsis AND Microsoft Excel 2000 is installed AND Excel.exe version is less than 9.0.0.8974 OR Microsoft Excel 2002 is installed AND Excel.exe version is less than 10.0.6850.0 OR Microsoft Excel 2003 is installed AND Excel.exe version is less than 11.0.8237.0 OR Microsoft Excel Viewer 2003 is installed AND Xlview.exe version is less than 11.0.8237.0
BACK