CVE-2008-3005

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and...

9.3 High

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."

Exploit likelihood

31.9%Down 14.8 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Record: CVE-2008-3005
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-3005
Updated: 2026-11-02

EUVDEUVD-2008-2995 No score

Record: EUVD-2008-2995
Updated: 2026-11-03

GitHub AdvisoriesGHSA-68jr-4mc7-f45r No score

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and...

Record: GHSA-68jr-4mc7-f45r
Weakness: CWE-20
Updated: 2026-11-02

Affected products

microsoft office

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-3005 is a high vulnerability (CVSS 9.3) in Microsoft Office, published August 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 31.9%, the 98th percentile. No source names a fixed version.

References

Show 5 moreShow less