CVE-2008-0668 describes a critical vulnerability in Gnome Office Gnumeric versions prior to 1.8.1, specifically within the excel_read_HLINK function, affecting products like Gnome Fedora and Red Hat Gnumeric. This flaw allows user-assisted remote attackers to execute arbitrary code through a crafted XLS file containing malicious HLINK opcodes, potentially due to an integer signedness error leading to an integer overflow. With a CVSS score of 9.3, it presents a high severity risk, indicating a network-based attack with medium complexity that could lead to complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting low current attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.7.91CPE matchmatch criteria | cpe:2.3:a:gnome:gnumeric:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.