CVE-2008-0113

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted...

9.3 HighPublic exploit

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."

Exploit likelihood

42.2%Down 4.5 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Record: CVE-2008-0113
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-94
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-0113
Updated: 2026-11-02

EUVDEUVD-2008-0126 No score

Record: EUVD-2008-0126
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fm88-xwm2-f8g5 No score

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted...

Record: GHSA-fm88-xwm2-f8g5
Weakness: CWE-94
Updated: 2026-11-02

Affected products

microsoft excel viewer

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Microsoft Office XP SP3 - '.PPT' File Buffer Overflow (MS08-016)	2008-03-30

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-0113 is a high vulnerability (CVSS 9.3) in Microsoft Excel Viewer, published March 11, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 42.2%, the 98th percentile. No source names a fixed version.

References

Show 5 moreShow less