CVE-2007-0030: Critical severity Microsoft Excel vulnerability

Published Jan 9, 2007

Updated

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via an Excel file with an out-of-range Column field in certain BIFF8 record types, which references arbitrary memory.

Affected Software

11 affected components

Microsoft Excel=2000

Microsoft Office=2000-sp3

Microsoft Excel=2002

Microsoft Office=xp-sp3

Microsoft Excel=2003

Microsoft Office=2003-sp2

Microsoft Excel Viewer=2003

Microsoft Works=2004

Microsoft Works=2005

Microsoft Office=2004

Microsoft Office=v.x

Remediation

Patch Available

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=460

Event History

Jan 9, 2007

CVE Published

11:28 PM

Jan 10, 2007

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0030?

CVE-2007-0030 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code.

How do I fix CVE-2007-0030?

To fix CVE-2007-0030, users should apply the latest security patches from Microsoft for the affected versions of Excel and Office.

Which versions of Microsoft Excel are affected by CVE-2007-0030?

CVE-2007-0030 affects Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2, as well as corresponding versions for Mac.

Can CVE-2007-0030 be exploited without user interaction?

CVE-2007-0030 requires user assistance, as the exploit is triggered by opening a malicious Excel file.

What types of files can exploit CVE-2007-0030?

CVE-2007-0030 can be exploited through specially crafted Excel files that contain out-of-range Column fields.