1. CVE-Search
  2. CVE-2004-0846
ID CVE-2004-0846
Summary Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel:2001:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:excel:2001:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel:x:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:excel:x:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 12-10-2018 - 21:35)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
oval via4
  • accepted 2012-05-28T04:01:35.560-04:00
    class vulnerability
    contributors
    • name Matthew Burton
      organization The MITRE Corporation
    • name John Hoyland
      organization Centennial Software
    • name Shane Shaffer
      organization G2, Inc.
    description Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.
    family windows
    id oval:org.mitre.oval:def:2673
    status accepted
    submitted 2004-10-18T12:07:00.000-04:00
    title Excel 2000 File Handler Code Execution Vulnerability
    version 5
  • accepted 2012-05-28T04:01:42.612-04:00
    class vulnerability
    contributors
    • name Matthew Burton
      organization The MITRE Corporation
    • name John Hoyland
      organization Centennial Software
    • name Shane Shaffer
      organization G2, Inc.
    description Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.
    family windows
    id oval:org.mitre.oval:def:4226
    status accepted
    submitted 2004-10-18T12:11:00.000-04:00
    title Excel 2002 File Handler Code Execution Vulnerability
    version 5
refmap via4
bugtraq 20041013 Buffer Overflow In Microsoft Excel
cert-vn VU#274496
ciac P-009
secunia 12800
xf
  • excel-execute-code(17653)
  • excel-ms04033-patch(17683)
Last major update 12-10-2018 - 21:35
Published 03-11-2004 - 05:00
Last modified 12-10-2018 - 21:35
Back to Top