CVE-2005-4131: Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other p...

Security readout for executives and security teams

This CVE describes a legacy Microsoft Excel flaw where a specially crafted spreadsheet can corrupt memory and potentially run code when a user opens it. The main business risk is from old Office installations or third-party products bundling affected Office components. No provided source shows current active exploitation. Exposure is most likely in environments retaining Microsoft Office/Excel 2000, 2002, or 2003, including legacy desktops, virtual desktops, lab systems, or vendor appliances that documented Office dependency risk. Prioritize remediation if any legacy Office remains in production. The vulnerability is old, but arbitrary code execution through business documents remains material where unsupported Excel is still used. Mitigation focus: Inventory endpoints for Excel or Office 2000, 2002, and 2003.; Retire or upgrade unsupported Office installations wherever possible.; Check Microsoft, US-CERT, and vendor advisories for applicable legacy update guidance..

Prepared

Jun 29, 2026, 16:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.