9.3

CVE-2007-0030

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MicrosoftExcel Version2000
MicrosoftOffice Version2000 Updatesp3
MicrosoftExcel Version2002
MicrosoftOffice Versionxp Updatesp3
MicrosoftExcel Version2003
MicrosoftOffice Version2003 Updatesp2
MicrosoftExcel Viewer Version2003
MicrosoftWorks Version2004
MicrosoftWorks Version2005
MicrosoftOffice Version2004 Editionmac
MicrosoftOffice Versionv.x Editionmac
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 32.09% 0.981
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/archive/1/457274/100/0/threaded
http://www.us-cert.gov/cas/techalerts/TA07-009A.html
US Government Resource
http://securitytracker.com/id?1017487
http://www.vupen.com/english/advisories/2007/0103
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=460
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/302836
US Government Resource
http://www.osvdb.org/31257
http://www.securityfocus.com/bid/21925
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A323