CVE-2007-0027 Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.
HighCVSS 9.3
EPSS 31.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2000 | No fix listed |
| Microsoft excel | = 2002 | No fix listed |
| Microsoft excel | = 2003 | No fix listed |
| Microsoft office | = 2000-sp3 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
| Microsoft office | = 2003-sp2 | No fix listed |
| Microsoft office | = 2004 | No fix listed |
| Microsoft office | = v.x | No fix listed |
| Microsoft excel viewer | = 2003 | No fix listed |
| Microsoft works | = 2004 | No fix listed |
| Microsoft works | = 2005 | No fix listed |
References
- 1017487 patch vdb-entry
- VU#749964 third-party-advisory us-government-resource
- 31255 vdb-entry
- HPSBST02184 vendor-advisory
- 21856 patch vdb-entry
- TA07-009A third-party-advisory us-government-resource
- ADV-2007-0103 vdb-entry
- MS07-002 vendor-advisory
- oval:org.mitre.oval:def:119 signature vdb-entry