[email protected]CVE-2007-0029

HistoryJan 09, 2007 - 11:28 p.m.

CVE-2007-0029

2007-01-0923:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0029

microsoft excel

user-assisted

remote code execution

vulnerability

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.703 High

EPSS

Percentile

98.0%

JSON

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string, aka “Excel Malformed String Vulnerability.”

CPENameOperatorVersion
microsoft:excelmicrosoft exceleq2000
microsoft:officemicrosoft officeeq2000
microsoft:officemicrosoft officeeqxp
microsoft:excelmicrosoft exceleq2002
microsoft:officemicrosoft officeeq2003
microsoft:excelmicrosoft exceleq2003
microsoft:excel_viewermicrosoft excel viewereq2003
microsoft:worksmicrosoft workseq2005
microsoft:worksmicrosoft workseq2004
microsoft:officemicrosoft officeeq2004

CPE	Name	Operator	Version
microsoft:excel	microsoft excel	eq	2000
microsoft:office	microsoft office	eq	2000
microsoft:office	microsoft office	eq	xp
microsoft:excel	microsoft excel	eq	2002
microsoft:office	microsoft office	eq	2003
microsoft:excel	microsoft excel	eq	2003
microsoft:excel_viewer	microsoft excel viewer	eq	2003
microsoft:works	microsoft works	eq	2005
microsoft:works	microsoft works	eq	2004
microsoft:office	microsoft office	eq	2004

Rows per page:

1-10 of 111

References

securitytracker.com/id?1017487

www.osvdb.org/31256

www.securityfocus.com/archive/1/457274/100/0/threaded

www.securityfocus.com/bid/21877

www.us-cert.gov/cas/techalerts/TA07-009A.html

www.vupen.com/english/advisories/2007/0103

docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1102

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.703 High

EPSS

Percentile

98.0%

JSON

Related for CVE-2007-0029

prion1 nessus1 securityvulns2