Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-4266

EPSS 59.29% · P98
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-4266

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Excel spreadsheet with a NAME record that contains an invalid index value, which triggers stack corruption, aka "Excel Global Array Memory Corruption Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Excel数组内存破坏漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Excel是美国微软（Microsoft）公司Office套件中的一款电子表格处理软件。 Microsoft Excel在解析记录和公式时存在多个内存破坏漏洞，在验证NAME记录中的索引值时存在栈破坏漏洞。如果用户打开带有畸形对象的特制Excel文件，这些漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-4266

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-4266

请登录查看更多情报信息。

Same Patch Batch · n/a · 2008-12-10 · 41 CVEs total

CVE-2008-5419EMC ControlCenter SAN Manager SST_CTGTRANS远程栈溢出漏洞
CVE-2008-4264Microsoft Excel畸形公式解析远程代码执行漏洞
CVE-2008-4265Microsoft Excel畸形对象解析远程代码执行漏洞
CVE-2008-4268Microsoft Windows保存搜索文件处理内存破坏漏洞
CVE-2008-4269Microsoft Windows search-ms协议解析远程代码执行漏洞
CVE-2008-4837Microsoft Word畸形对象解析多个缓冲区溢出和内存破坏漏洞
CVE-2008-4841Microsoft写字板文件转换器远程代码执行漏洞
CVE-2008-5416Microsoft SQL Server sp_replwritetovarbin远程堆溢出漏洞
CVE-2008-5417HP DECnet-Plus OpenVMS 'OSIT$NAMES'权限许可和访问控制漏洞
CVE-2008-5418PUNBB PunPortal login.php目录遍历漏洞
CVE-2008-4261Microsoft IE HTML渲染内存破坏漏洞
CVE-2008-5420EMC ControlCenter SAN Manager SST_SENDFILE远程文件检索漏洞
CVE-2008-4311D-Bus 规则绕过安全限制漏洞
CVE-2008-5304TWiki URLPARAM变量跨站脚本漏洞
CVE-2008-5305TWiki SEARCH变量SHELL命令注入漏洞
CVE-2008-5410Sun Solaris OpenSSL 'PKCS#11' Engine 远程拒绝服务漏洞
CVE-2008-5411IBM WebSphere应用程序服务器网络敏感信息泄露漏洞
CVE-2008-5412IBM WebSphere Windows上的JSPs未明漏洞
CVE-2008-5413IBM WebSphere PerfServlet信息泄露漏洞
CVE-2008-5414IBM WebSphere Feature Pack未明漏洞

Showing top 20 of 41 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-4266

No comments yet

Leave a comment