CISA hat am 12.08.2025 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 02.09.2025.
Erforderliche Maßnahme: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 ; https://nvd.nist.gov/vuln/detail/CVE-2007-0671
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| microsoft | access | 2000 | |
| microsoft | excel | 2000 | |
| microsoft | excel viewer | 2003 | |
| microsoft | frontpage | 2000 | |
| microsoft | infopath | 2003 | |
| microsoft | office | 2000 | |
| microsoft | onenote | 2003 | |
| microsoft | outlook | 2000 | |
| microsoft | powerpoint | 2000 | |
| microsoft | project | 2000 | |
| microsoft | publisher | 2000 | |
| microsoft | visio | 2002 | |
| microsoft | word | 2000 | |
| microsoft | word viewer | 2003 |
cpe:2.3:a:microsoft:access:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:access:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:access:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:frontpage:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:frontpage:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:frontpage:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:infopath:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:onenote:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:project:2000:sr1:*:*:*:*:*:*cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*cpe:2.3:a:microsoft:project:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:publisher:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:publisher:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:visio:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.