First published: Tue Jan 09 2007(Updated: )
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Excel for Mac | =2000 | |
Microsoft Office | =2000-sp3 | |
Microsoft Office | =xp-sp3 | |
Microsoft Excel for Mac | =2002 | |
Microsoft Office | =2003-sp2 | |
Microsoft Excel for Mac | =2003 | |
Microsoft Excel Viewer | =2003 | |
Microsoft Works | =2005 | |
Microsoft Works | =2004 | |
Microsoft Office | =2004 | |
Microsoft Office | =v.x |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-0030 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code.
To fix CVE-2007-0030, users should apply the latest security patches from Microsoft for the affected versions of Excel and Office.
CVE-2007-0030 affects Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2, as well as corresponding versions for Mac.
CVE-2007-0030 requires user assistance, as the exploit is triggered by opening a malicious Excel file.
CVE-2007-0030 can be exploited through specially crafted Excel files that contain out-of-range Column fields.