CVE-2007-3890

2007-08-1421:17:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

microsoft

excel

memory corruption

vulnerability

cve-2007-3890

nvd

office 2000

office xp

office 2003

office 2004

remote code execution

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.389 Low

EPSS

Percentile

97.2%

JSON

Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2004
microsoft:officemicrosoft officeeqxp
microsoft:officemicrosoft officeeq2003
microsoft:excelmicrosoft exceleqxp_sp3
microsoft:excelmicrosoft exceleq2000
microsoft:excelmicrosoft exceleq2004
microsoft:excelmicrosoft exceleq2003
microsoft:officemicrosoft officeeq2000

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2004
microsoft:office	microsoft office	eq	xp
microsoft:office	microsoft office	eq	2003
microsoft:excel	microsoft excel	eq	xp_sp3
microsoft:excel	microsoft excel	eq	2000
microsoft:excel	microsoft excel	eq	2004
microsoft:excel	microsoft excel	eq	2003
microsoft:office	microsoft office	eq	2000