CVE-2004-0846

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 28.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-11-03 · updated 2026-06-16

Description

Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.

Affected products

Microsoft Excel 2013 Service Pack 1: 2000, 2001, 2002, x
Microsoft Office: 2000-sp3, 2001, v.x

References

http://marc.info/?l=bugtraq&m=109779810827096&w=2
http://secunia.com/advisories/12800/
http://www.ciac.org/ciac/bulletins/p-009.shtml
http://www.kb.cert.org/vuls/id/274496
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-033
https://exchange.xforce.ibmcloud.com/vulnerabilities/17653
https://exchange.xforce.ibmcloud.com/vulnerabilities/17683
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2673
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4226
http://marc.info/?l=bugtraq&m=109779810827096&w=2
http://secunia.com/advisories/12800/
http://www.ciac.org/ciac/bulletins/p-009.shtml

Get alerted when CVE-2004-0846 or the next vulnerability affects your stack