← Vulnerability feed

Vulnerability record · CVE-2008-0113 · published 11 March 2008

CVE-2008-0113: Microsoft excel viewer code injection vulnerability

Microsoft · Excel Viewer

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."

9.3 CVSS 2.0 High EPSS 42% · top 1.3% CWE-94 · Code injection
9.3CVSS 2.0 base score
42%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=120585858807305&w=2
http://secunia.com/advisories/29321 Vendor Advisory
http://www.securityfocus.com/archive/1/489415/100/0/threaded
http://www.securitytracker.com/id?1019578
http://www.us-cert.gov/cas/techalerts/TA08-071A.html US Government Resource
http://www.vupen.com/english/advisories/2008/0848/references Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-008
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5421
http://marc.info/?l=bugtraq&m=120585858807305&w=2
http://secunia.com/advisories/29321 Vendor Advisory
http://www.securityfocus.com/archive/1/489415/100/0/threaded
http://www.securitytracker.com/id?1019578
http://www.us-cert.gov/cas/techalerts/TA08-071A.html US Government Resource
http://www.vupen.com/english/advisories/2008/0848/references Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-008
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5421

Track CVE-2008-0113 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-0541Microsoft MSHTML engine input validation flaw allows remote code executionThe MSHTML engine in Microsoft Office, Internet Explorer and related viewers fails to properly validate input, allowing remote code execution. Becaus…KEVEPSS 53%analysed8.8CVE-2015-2424Microsoft Office memory corruption via crafted documentCVE-2015-2424 is an out-of-bounds write (CWE-787) in Microsoft PowerPoint and Word that is triggered when a crafted Office document is opened. A remo…KEVEPSS 40%analysed8.8CVE-2009-0238Microsoft Excel invalid object access allows remote code executionMicrosoft Excel and related viewers (Excel 2000 through 2007, Excel Viewer, Office Compatibility Pack, and Office for Mac 2004/2008) fail to handle a…KEVEPSS 43%analysed8.8CVE-2007-0671Microsoft Excel remote code execution via malformed fileCVE-2007-0671 is an unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, that allows re…KEVEPSS 43%analysed7.8CVE-2016-7262Microsoft Excel security feature bypass enables command executionA crafted cell in affected Microsoft Excel and Excel Viewer versions is mishandled when a user clicks it, allowing a security feature bypass that lea…KEVEPSS 58%analysed7.8CVE-2013-3906Microsoft GDI+ TIFF parsing code execution via crafted imageGDI+ in multiple Microsoft products fails to properly handle crafted TIFF images, allowing memory corruption that leads to arbitrary code execution. …KEVEPSS 85%analysed7.8CVE-2009-3129Microsoft Excel FEATHEADER record memory corruptionMicrosoft Excel and related Office components mishandle a FEATHEADER record whose cbHdrData size element is invalid, corrupting a pointer offset and …KEVEPSS 84%analysed9.8CVE-2008-0081Microsoft Excel macro validation flaw allows remote code executionCVE-2008-0081 is an unspecified macro validation vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Excel Viewer 2003, and Office 2004 for M…EPSS 58%analysed

Source: NIST National Vulnerability Database (record CVE-2008-0113), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.