NetSight
critical9.3

CVE-2007-0030

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file w…

Impact

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.

Affected products

VendorProductAffected versions
MicrosoftExcel
Versions 2000, 2002, 2003
MicrosoftOffice
Versions 2000, xp, 2003, 2004, v.x
MicrosoftExcel Viewer
Version 2003
MicrosoftWorks
Versions 2004, 2005

References