PT-2007-2125 · Microsoft · Office Excel+2

Published 2007-02-02 · Updated 2025-10-22 · CVE-2007-0671

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2000, XP, 2003, and 2004 for Mac

Description A remote code execution issue exists in Excel, allowing attackers to execute arbitrary code when the application opens a specially crafted file. This file could be sent as an email attachment or hosted on a malicious website. An attacker can exploit this issue by creating a specially crafted Excel file that enables remote code execution.

Recommendations For Microsoft Excel versions 2000, XP, 2003, and 2004 for Mac, consider avoiding the use of the application to open files from untrusted sources until a fix is available. As a temporary workaround, restrict access to email attachments and links to malicious web sites to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-0671

Affected Products

Office Excel

Office

Office Visio

References · 29

• https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 · Security Note
• http://secunia.com/advisories/24008 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 · Vendor Advisory
• http://vupen.com/english/advisories/2007/0463 · Vendor Advisory
• http://microsoft.com/technet/security/advisory/932553.mspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0671 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0671 · Security Note
• https://t.me/cveNotify/139749 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32178 · Note
• https://twitter.com/CISACyber/status/1955334932827410440 · Twitter Post
• http://securityfocus.com/bid/22383 · Note
• https://t.me/cveNotify/131980 · Telegram Post
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0671 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-015 · Note