ID:535 - Exploit for Memory Corruption in Microsoft Excel and Microsoft Office for macOS - CVE-2008-0112

Vulnerability identifier: #VU1260

Vulnerability risk: High

CVE-ID: CVE-2008-0112

CWE-ID: CWE-119

Exploitation vector: Remote access

Vulnerable software:
Microsoft Excel
Microsoft Office for macOS

https://www.exploit-db.com/exploits/5287/

The vulnerability alows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to a boundary error when importing files into Excel. A remote attacker can create a specially crafted Excel file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system with privileges of the current user.

Successful exploitation of the vulnerability results in arbitrary code execution on the vulnerable system.

Excel 2000 Service Pack 3:
https://www.microsoft.com/downloads/details.aspx?FamilyId=f7f90c30-1bfd-406b-a77f-612443e30185
Microsoft Office 2004 for Mac:
https://www.microsoft.com/downloads/details.aspx?FamilyId=95DCEB37-B35F-46DB-B280-DB0F3B298AA9
Microsoft Office 2008 for Mac:
https://www.microsoft.com/downloads/details.aspx?FamilyId=8FE8C32A-6D7A-482B-97C6-42562F089EE4