CVE-2007-0031

Microsoft Excel - Heap-based Buffer Overflow via BIFF8 PALETTE Record

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-0031. PoCs published by LifeAsaGeek.

AI-analyzed exploit summary This PoC exploits a heap overflow vulnerability in Microsoft Excel by crafting a malformed Palette Record, leading to a denial-of-service (DoS) condition. It modifies an Excel file to trigger the vulnerability when opened.

Description

Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries.

Exploits (1)

exploitdb WORKING POC VERIFIED

by LifeAsaGeek · pythondoswindows

https://www.exploit-db.com/exploits/3193

View Code ZIP pw:eip

This PoC exploits a heap overflow vulnerability in Microsoft Excel by crafting a malformed Palette Record, leading to a denial-of-service (DoS) condition. It modifies an Excel file to trigger the vulnerability when opened.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: Microsoft Excel (versions affected by MS07-002)

No auth needed

Prerequisites: Python with pyExcelerator module · Ability to deliver the malformed Excel file to the target

MITRE ATT&CK