Description
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Microsoft / access2000 – 2000
- Microsoft / access2002 – 2002
- Microsoft / access2003 – 2003
- Microsoft / Excel2000 – 2000
- Microsoft / Excel2002 – 2002
- Microsoft / Excel2003 – 2003
- Microsoft / excel_viewer2003 – 2003
- Microsoft / frontpage2000 – 2000
- Microsoft / frontpage2002 – 2002
- Microsoft / frontpage2003 – 2003
- Microsoft / infopath2003 – 2003
- Microsoft / office2000 – 2000
- Microsoft / office2003 – 2003
- Microsoft / office2004 – 2004
- Microsoft / officexp – xp
- Microsoft / OneNote2003 – 2003
- Microsoft / Outlook2000 – 2000
- Microsoft / Outlook2002 – 2002
- Microsoft / Outlook2003 – 2003
- Microsoft / PowerPoint2000 – 2000
- Microsoft / PowerPoint2002 – 2002
- Microsoft / PowerPoint2003 – 2003
- Microsoft / project2000 – 2000
- Microsoft / project2002 – 2002
- Microsoft / project2003 – 2003
- Microsoft / publisher2000 – 2000
- Microsoft / publisher2002 – 2002
- Microsoft / publisher2003 – 2003
- Microsoft / visio2002 – 2002
- Microsoft / visio2003 – 2003
- Microsoft / Word2000 – 2000
- Microsoft / Word2002 – 2002
- Microsoft / Word2003 – 2003
- Microsoft / word_viewer2003 – 2003
References
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/0463
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301
- MISChttp://osvdb.org/31901
- MISChttp://www.microsoft.com/technet/security/advisory/932553.mspx
- MISChttp://www.kb.cert.org/vuls/id/613740
- MISChttp://securitytracker.com/id?1017584
- MISChttp://www.avertlabs.com/research/blog/?p=191
- VENDOR_ADVISORYhttp://secunia.com/advisories/24008
- MISChttp://www.us-cert.gov/cas/techalerts/TA07-044A.html
- MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/32178
- MISChttp://vil.nai.com/vil/content/v_141393.htm
- MISChttp://www.securityfocus.com/bid/22383