CVE-2008-0113

Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code via an Excel document with malformed cell comments that trigger memory corruption from an "allocation error," aka "Microsoft Office Cell Parsing Memory Corruption Vulnerability."

• CWE-94

• http://marc.info/?l=bugtraq&m=120585858807305&w=2
• http://secunia.com/advisories/29321Vendor Advisory
• http://www.securityfocus.com/archive/1/489415/100/0/threaded
• http://www.securitytracker.com/id?1019578
• http://www.us-cert.gov/cas/techalerts/TA08-071A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0848/referencesVendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-08-008
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5421
• http://marc.info/?l=bugtraq&m=120585858807305&w=2
• http://secunia.com/advisories/29321Vendor Advisory
• http://www.securityfocus.com/archive/1/489415/100/0/threaded
• http://www.securitytracker.com/id?1019578
• http://www.us-cert.gov/cas/techalerts/TA08-071A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2008/0848/referencesVendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-08-008
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-016
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5421

Published

Mar 11, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0107Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 …
• CVE-2008-0108Stack-based buffer overflow in wkcvqd01.dll in Microsoft Wor…
• CVE-2008-0109Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, …
• CVE-2008-0110Unspecified vulnerability in Microsoft Outlook in Office 200…
• CVE-2008-0111Unspecified vulnerability in Microsoft Excel 2000 SP3 throug…
• CVE-2008-0112Unspecified vulnerability in Microsoft Excel 2000 SP3, and O…
• CVE-2008-0114Unspecified vulnerability in Microsoft Excel 2000 SP3 throug…
• CVE-2008-0115Unspecified vulnerability in Microsoft Excel 2000 SP3 throug…
• CVE-2008-0116Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Comp…
• CVE-2008-0117Unspecified vulnerability in Microsoft Excel 2000 SP3 and 20…
• CVE-2008-0118Unspecified vulnerability in Microsoft Office 2000 SP3, XP S…
• CVE-2008-0119Unspecified vulnerability in Microsoft Publisher in Office 2…