high8.8Known exploited
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-08-12. Federal due date: 2025-09-02.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Access | Versions 2000, 2002, 2003 |
| Microsoft | Excel | Versions 2000, 2002, 2003 |
| Microsoft | Excel Viewer | Version 2003 |
| Microsoft | Frontpage | Versions 2000, 2002, 2003 |
| Microsoft | Infopath | Version 2003 |
| Microsoft | Office | Versions 2000, 2003, 2004, xp |
| Microsoft | Onenote | Version 2003 |
| Microsoft | Outlook | Versions 2000, 2002, 2003 |
| Microsoft | Powerpoint | Versions 2000, 2002, 2003 |
| Microsoft | Project | Versions 2000, 2002, 2003 |
| Microsoft | Publisher | Versions 2000, 2002, 2003 |
| Microsoft | Visio | Versions 2002, 2003 |
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://osvdb.org/31901
- http://secunia.com/advisories/24008
- http://securitytracker.com/id?1017584
- http://vil.nai.com/vil/content/v_141393.htm
- http://www.avertlabs.com/research/blog/?p=191
- http://www.kb.cert.org/vuls/id/613740
- http://www.microsoft.com/technet/security/advisory/932553.mspx
- http://www.securityfocus.com/bid/22383
- http://www.us-cert.gov/cas/techalerts/TA07-044A.html
- http://www.vupen.com/english/advisories/2007/0463
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32178
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301
- http://osvdb.org/31901
- http://secunia.com/advisories/24008
- http://securitytracker.com/id?1017584
- http://vil.nai.com/vil/content/v_141393.htm
- http://www.avertlabs.com/research/blog/?p=191
- http://www.kb.cert.org/vuls/id/613740
- http://www.microsoft.com/technet/security/advisory/932553.mspx
- http://www.securityfocus.com/bid/22383
- http://www.us-cert.gov/cas/techalerts/TA07-044A.html
- http://www.vupen.com/english/advisories/2007/0463
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32178