CVEvulnerability

CVE-2007-0028

9.3 HIGH Published 2007-01-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-01-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an early disclosure of this issue used CVE-2006-3432, but only CVE-2007-0028 should be used.

Affected configurations

• microsoft excel 2000 • microsoft office 2000 • microsoft excel 2002 • microsoft office xp • microsoft excel 2003 • microsoft office 2003 • microsoft excel viewer 2003 • microsoft works 2004 • microsoft works 2005 • microsoft office 2004 • microsoft office v.x

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References