Back

CVE-2008-0081

CRITICAL

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.

Published: Jan 16, 2008 Modified: Apr 23, 2026
CWE-908 CWE-908

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (5)

Vendor Product Version
microsoft excel 2000
microsoft excel 2002
microsoft excel 2003
microsoft excel_viewer 2003
microsoft office 2004

GitHub Security Advisory GHSA-h6j8-g36h-j99v

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office...

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 81.77%

Top 1% most likely to be exploited

Threat Score 73.7 / 100

Data Sources

NVD EPSS GitHub