CVE-2008-0113 Memory corruption in n/a

What is CVE-2008-0113?

CVE-2008-0113 is a critical memory corruption vulnerability in Microsoft Excel Viewer, published on 11 Mar 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."

Weakness: CWE-94

Which versions are affected by CVE-2008-0113?

It affects 1 product.

Products include Microsoft Excel Viewer.

How do I fix CVE-2008-0113?

No fix has been published for CVE-2008-0113 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2008-0113 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-0113 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Microsoft Excel Viewer

• CVE-2019-0541 Microsoft MSHTML Remote Code Execution Exploited High 8.8
• CVE-2015-2424 Microsoft PowerPoint Memory Corruption Exploited High 8.8
• CVE-2013-3906 Microsoft Graphics Component Memory Corruption Exploited High 7.8
• CVE-2018-8432 Memory corruption in Microsoft Excel Viewer High 7.8
• CVE-2019-0540 Security feature bypass in Microsoft Excel Viewer Medium 5.5

All Microsoft Excel Viewer vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-fm88-xwm2-f8g5.