deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-1250
Published: 2008-03-10
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence.
CVSS Score: 9.3 (HIGH)
CWE: CWE-352
References: http://secunia.com/advisories/28938; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded
CVE: CVE-2008-1251
Published: 2008-03-10
Description: Cross-site scripting (XSS) vulnerability in the web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/28938; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded
CVE: CVE-2008-1252
Published: 2008-03-10
Description: b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.
CVSS Score: 10.0 (HIGH)
CWE: CWE-200
References: http://secunia.com/advisories/29414; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded
CVE: CVE-2008-1253
Published: 2008-03-10
Description: Cross-site scripting (XSS) vulnerability in cgi-bin/webcm on the D-Link DSL-G604T router allows remote attackers to inject arbitrary web script or HTML via the var:category parameter, as demonstrated by a request for advanced/portforw.htm on the fwan page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/29530; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded
CVE: CVE-2008-1254
Published: 2008-03-10
Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to (1) change DNS servers and (2) add keywords to the "bannedlist" via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41111
CVE: CVE-2008-1255
Published: 2008-03-10
Description: The ZyXEL P-660HW series router maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41114
CVE: CVE-2008-1256
Published: 2008-03-10
Description: The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access.
CVSS Score: 10.0 (HIGH)
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41108
CVE: CVE-2008-1257
Published: 2008-03-10
Description: Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41109
CVE: CVE-2008-1258
Published: 2008-03-10
Description: Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/29531; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded
CVE: CVE-2008-1259
Published: 2008-03-10
Description: The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a user who previously authenticated within the previous 5 minutes.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41112
CVE: CVE-2008-1260
Published: 2008-03-10
Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware allow remote attackers to (1) make the admin web server available on the Internet (WAN) interface via the WWWAccessInterface parameter to Forms/RemMagWWW_1 or (2) change the IP whitelisting timeout via the StdioTimout parameter to Forms/rpSysAdmin_1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41170
CVE: CVE-2008-1261
Published: 2008-03-10
Description: The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI.
CVSS Score: 5.0 (MEDIUM)
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41113
CVE: CVE-2008-1262
Published: 2008-03-10
Description: The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://airspan4wimax.googlepages.com/; http://secunia.com/advisories/29265; http://www.0x000000.com/?i=524
CVE: CVE-2008-1263
Published: 2008-03-10
Description: The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP request for the top-level Config.bin URI.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-310
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41115
CVE: CVE-2008-1264
Published: 2008-03-10
Description: The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents, and an ELF executable file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41126
CVE: CVE-2008-1265
Published: 2008-03-10
Description: The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41127
CVE: CVE-2008-1266
Published: 2008-03-10
Description: Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/29366; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded
CVE: CVE-2008-1267
Published: 2008-03-10
Description: The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web interface crash) via an HTTP request to basehelp_English.htm with a large integer in the Content-Length field.
CVSS Score: 7.8 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/29325; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded
CVE: CVE-2008-1268
Published: 2008-03-10
Description: The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://swbae.egloos.com/1701135; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded
CVE: CVE-2008-1269
Published: 2008-03-10
Description: cp06_wifi_m_nocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request.
CVSS Score: 7.1 (HIGH)
CWE: CWE-287
References: http://vx.netlux.org/wargamevx/alice_gate2_pluswifi_PoC.zip; http://www.gnucitizen.org/projects/router-hacking-challenge/; http://www.securityfocus.com/archive/1/489009/100/0/threaded
CVE: CVE-2008-1270
Published: 2008-03-10
Description: mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to read arbitrary files, as demonstrated by accessing the ~nobody directory.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html; http://secunia.com/advisories/29318; http://secunia.com/advisories/29403
CVE: CVE-2008-1271
Published: 2008-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-1218.  Reason: This candidate is a duplicate of CVE-2008-1218.  Notes: All CVE users should reference CVE-2008-1218 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CWE: CWE-255
CVE: CVE-2008-1161
Published: 2008-03-10
Description: Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Matroska file with invalid frame sizes.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset%3Bnode=a62d6f482a69%3Bstyle=gitweb; http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html; http://secunia.com/advisories/29323
CVE: CVE-2008-1218
Published: 2008-03-10
Description: Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs, allows remote attackers to bypass the password check via a password containing TAB characters, which are treated as argument delimiters that enable the skip_password_check field to be specified.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-255
References: http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00004.html; http://secunia.com/advisories/29226; http://secunia.com/advisories/29295
CVE: CVE-2008-1272
Published: 2008-03-10
Description: Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showad.php and the (2) ad parameter to pfriendly.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/29297; http://www.securityfocus.com/bid/28159; https://exchange.xforce.ibmcloud.com/vulnerabilities/41066
CVE: CVE-2008-1273
Published: 2008-03-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, and (4) dirxml.php in upload/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/28138.html; http://www.securityfocus.com/bid/28138; https://exchange.xforce.ibmcloud.com/vulnerabilities/41169
CVE: CVE-2008-1274
Published: 2008-03-10
Description: Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a malicious program in the man directory.
CVSS Score: 6.9 (MEDIUM)
References: http://secunia.com/advisories/29301; http://www-1.ibm.com/support/search.wss?rs=0&q=IZ17177&apar=only; http://www.securityfocus.com/bid/28180
CVE: CVE-2008-1275
Published: 2008-03-10
Description: Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service (crash) via crafted (1) EXPN or (2) VRFY commands.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/29300; http://www.mailenable.com/hotfix/; http://www.securityfocus.com/bid/28154
CVE: CVE-2008-1276
Published: 2008-03-10
Description: Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/maildisable-adv.txt; http://secunia.com/advisories/29277; http://securityreason.com/securityalert/3724
CVE: CVE-2008-1277
Published: 2008-03-10
Description: The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference.
CVSS Score: 9.0 (HIGH)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/maildisable-adv.txt; http://secunia.com/advisories/29277; http://securityreason.com/securityalert/3724
CVE: CVE-2008-1278
Published: 2008-03-10
Description: The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header, which triggers a NULL pointer dereference.  NOTE: the service is automatically restarted.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/remotelynowhere-adv.txt; http://secunia.com/advisories/29296; http://www.securityfocus.com/archive/1/489354/100/0/threaded
CVE: CVE-2008-1279
Published: 2008-03-10
Description: Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a packet with an invalid length field, which causes an out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/acrogroup-adv.txt; http://secunia.com/advisories/29306; http://www.securityfocus.com/archive/1/489353/100/0/threaded
CVE: CVE-2008-1280
Published: 2008-03-10
Description: Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/acroagent-adv.txt; http://secunia.com/advisories/29306; http://www.securityfocus.com/archive/1/489362/100/0/threaded
CVE: CVE-2008-1281
Published: 2008-03-10
Description: Directory traversal vulnerability in TFTPsrvs.exe 2.5.3.1 and earlier, as used in Argon Technology Client Management Services (CMS) 1.31 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://aluigi.altervista.org/adv/argonauti-adv.txt; http://secunia.com/advisories/29302; http://www.securityfocus.com/archive/1/489363/100/0/threaded
CVE: CVE-2008-1282
Published: 2008-03-10
Description: Buffer overflow in the BFup ActiveX control (BFup.dll) in B21Soft BFup before 1.0.802.29 allows remote attackers to execute arbitrary code via a long FilePath parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/29260; http://www.hi-ho.ne.jp/babaq/bfupinfo.html
CVE: CVE-2008-1283
Published: 2008-03-11
Description: Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3725; http://www.securityfocus.com/archive/1/489282/100/0/threaded; http://www.securityfocus.com/bid/28148
CVE: CVE-2008-1284
Published: 2008-03-11
Description: Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with certain configurations, allows remote authenticated users to read and execute arbitrary files via ".." sequences and a null byte in the theme name.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-22
References: http://lists.horde.org/archives/announce/2008/000382.html; http://lists.horde.org/archives/announce/2008/000383.html; http://lists.horde.org/archives/announce/2008/000384.html
CVE: CVE-2008-1285
Published: 2008-03-11
Description: Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2008-0825.html; http://rhn.redhat.com/errata/RHSA-2008-0826.html; http://rhn.redhat.com/errata/RHSA-2008-0827.html
CVE: CVE-2008-1286
Published: 2008-03-11
Description: Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and determine the existence of files or directories via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/29290; http://sunsolve.sun.com/search/document.do?assetkey=1-26-231526-1; http://www.securityfocus.com/bid/28155
CVE: CVE-2008-1287
Published: 2008-03-11
Description: IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://secunia.com/advisories/29280; http://www-1.ibm.com/support/docview.wss?uid=swg1PK55561; http://www.securityfocus.com/bid/28132
CVE: CVE-2008-1288
Published: 2008-03-11
Description: IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/29280; http://www-1.ibm.com/support/docview.wss?uid=swg1PK55753; http://www.securityfocus.com/bid/28133
CVE: CVE-2007-1201
Published: 2008-03-11
Description: Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components DataSource Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://secunia.com/advisories/29328; http://www.securityfocus.com/bid/28136
CVE: CVE-2008-0110
Published: 2008-03-11
Description: Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://secunia.com/advisories/29320; http://www.kb.cert.org/vuls/id/393305
CVE: CVE-2008-0111
Published: 2008-03-11
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted data validation records, aka "Excel Data Validation Record Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://www.securityfocus.com/bid/28094; http://www.securitytracker.com/id?1019582
CVE: CVE-2008-0112
Published: 2008-03-11
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arbitrary code via a crafted .SLK file that is not properly handled when importing the file, aka "Excel File Import Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://www.securityfocus.com/bid/28095; http://www.securitytracker.com/id?1019583
CVE: CVE-2008-0113
Published: 2008-03-11
Description: Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://secunia.com/advisories/29321; http://www.securityfocus.com/archive/1/489415/100/0/threaded
CVE: CVE-2008-0114
Published: 2008-03-11
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via crafted Style records that trigger memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://www.securityfocus.com/bid/28166; http://www.securitytracker.com/id?1019584
CVE: CVE-2008-0115
Published: 2008-03-11
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-assisted remote attackers to execute arbitrary code via malformed formulas, aka "Excel Formula Parsing Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://www.securityfocus.com/bid/28167; http://www.securitytracker.com/id?1019585
CVE: CVE-2008-0116
Published: 2008-03-11
Description: Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote attackers to execute arbitrary code via malformed tags in rich text, aka "Excel Rich Text Validation Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-20, CWE-94
References: http://dvlabs.tippingpoint.com/advisory/TPTI-08-03; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://www.securityfocus.com/archive/1/489430/100/0/threaded