PT-2007-2125 · Microsoft · Office Excel+2

Publicado 2007-02-02 · Atualizado 2025-10-22 · CVE-2007-0671

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2000, XP, 2003, and 2004 for Mac

Description A remote code execution issue exists in Excel, allowing attackers to execute arbitrary code when the application opens a specially crafted file. This file could be sent as an email attachment or hosted on a malicious website. An attacker can exploit this issue by creating a specially crafted Excel file that enables remote code execution.

Recommendations For Microsoft Excel versions 2000, XP, 2003, and 2004 for Mac, consider avoiding the use of the application to open files from untrusted sources until a fix is available. As a temporary workaround, restrict access to email attachments and links to malicious web sites to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-0671

Produtos afetados

Office Excel

Office

Office Visio

Referências · 29

• https://t.me/cveNotify/139749 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32178 · Nota
• https://twitter.com/CISACyber/status/1955334932827410440 · Publicação no Twitter
• http://securityfocus.com/bid/22383 · Nota
• https://t.me/cveNotify/131980 · Publicação no Telegram
• https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301 · Nota
• http://secunia.com/advisories/24008 · Aviso do Fabricante
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0671 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-015 · Nota
• http://xforce.iss.net/xforce/xfdb/32178 · Nota
• http://kb.cert.org/vuls/id/613740 · Nota
• http://vupen.com/english/advisories/2007/0463 · Aviso do Fabricante
• http://frsirt.com/english/advisories/2007/0463 · Nota