Oval Definition:oval:org.mitre.oval:def:5885
Revision Date:2014-06-30Version:13
Title:Excel Indexing Validation Vulnerability
Description:Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for Mac do not properly validate index values for AxesSet records when loading Excel files, which allows remote attackers to execute arbitrary code via a crafted Excel file, aka the "Excel Indexing Validation Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2008-3004
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):Microsoft Excel 2000
Microsoft Excel 2002
Microsoft Excel 2003
Microsoft Excel Viewer 2003
Definition Synopsis
  • excel 2000 sp3/version
  • Excel 2000 SP3 or greater is installed
  • AND Excel.exe version is less than 9.0.0.8971
  • OR excel 2002 sp3/version
  • Microsoft Excel 2002 is installed
  • AND Excel 2002 SP3 or greater is installed
  • AND Excel.exe version is less than 10.0.6845.0
  • OR excel 2003 sp3/version
  • Microsoft Excel 2003 SP3 is installed
  • AND Excel.exe version is less than 11.0.8220.0
  • OR excel viewer 2003/version
  • Microsoft Excel Viewer 2003 is installed
  • AND Xlview.exe version is less than 11.0.8220.0
    • BACK