CVE-2007-3890: Critical severity Microsoft Office vulnerability

Published Aug 14, 2007

Updated

Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.

Affected Software

8 affected components

Microsoft Office=2004

Microsoft Office=xp-sp3

Microsoft Office=2003-sp2

Microsoft Excel=xp_sp3

Microsoft Excel=2000-sp3

Microsoft Excel=2004

Microsoft Excel=2003-sp2

Microsoft Office=2000-sp3

Event History

Aug 14, 2007

CVE Published

09:17 PM

Aug 15, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3890?

CVE-2007-3890 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2007-3890?

To fix CVE-2007-3890, it is recommended to apply the latest security updates from Microsoft for the affected Office versions.

What products are affected by CVE-2007-3890?

CVE-2007-3890 affects Microsoft Excel 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac.

What type of attack does CVE-2007-3890 facilitate?

CVE-2007-3890 allows remote attackers to execute arbitrary code via a crafted Workspace file.

Is there a workaround for CVE-2007-3890 if I cannot update immediately?

As a temporary workaround for CVE-2007-3890, users should avoid opening untrusted Excel files or limit Excel's access to the network.