CVE-2007-0027

Microsoft Excel 2000/2002/2003/2004/Mac - RCE via Malformed IMDATA Records

Title source: llm
STIX 2.1

Description

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/31255
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-009A.html
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017487
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21856
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/457274/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0103
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/749964
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A119

Scores

EPSS 0.3117
EPSS Percentile 98.1%

Details

Status published
Products (11)
microsoft/excel 2000
microsoft/excel 2002
microsoft/excel 2003
microsoft/excel_viewer 2003
microsoft/office 2000 sp3
microsoft/office xp sp3
microsoft/office 2003 sp2
microsoft/office 2004
microsoft/office v.x
microsoft/works 2004
... and 1 more
Published Jan 09, 2007
Tracked Since Feb 18, 2026