PRIOn knowledge basePRION:CVE-2007-3890

HistoryAug 14, 2007 - 9:17 p.m.

Memory corruption

2007-08-1421:17:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.389 Low

EPSS

Percentile

97.1%

JSON

Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.

CPENameOperatorVersion
exceleqxp-sp3
exceleq2000 sp3
exceleq2004 mac
exceleq2003 sp2
officeeq2004 mac
officeeqxp sp3
officeeq2003 sp2
officeeq2000 sp3

Name	Operator	Version
excel	eq	xp-sp3
excel	eq	2000 sp3
excel	eq	2004 mac
excel	eq	2003 sp2
office	eq	2004 mac
office	eq	xp sp3
office	eq	2003 sp2
office	eq	2000 sp3

References

secunia.com/advisories/26145

www.securityfocus.com/bid/25280

www.securitytracker.com/id?1018561

www.us-cert.gov/cas/techalerts/TA07-226A.html

www.vupen.com/english/advisories/2007/2868

docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-044

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2149

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.389 Low

EPSS

Percentile

97.1%

JSON

Related for PRION:CVE-2007-3890