CVE-2008-3005: Microsoft Office

High severity, CVSS 9.3. EPSS: 31.9% chance of exploitation in the next 30 days.

Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remote attackers to execute arbitrary code via an Excel file with a crafted array index for a FORMAT record, aka the "Excel Index Array Vulnerability."

Affected products

• Microsoft Office: version 2000 only; version xp only; version 2004 only; version 2008 only

Published 2008-08-12. Last modified 2026-06-16.