8.8Alta KEV

CVE-2007-0671Microsoft Office Excel Remote Code Execution Vulnerability

microsoft access; microsoft excel; microsoft excel viewer; microsoft frontpage Publicada: (hace 19 años)

Explotación conocida — Microsoft Office Excel Remote Code Execution Vulnerability

CISA confirmó el 12.08.2025 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 02.09.2025.

Acción requerida: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 ; https://nvd.nist.gov/vuln/detail/CVE-2007-0671

Descripción

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
microsoft access 2000
microsoft excel 2000
microsoft excel viewer 2003
microsoft frontpage 2000
microsoft infopath 2003
microsoft office 2000
microsoft onenote 2003
microsoft outlook 2000
microsoft powerpoint 2000
microsoft project 2000
microsoft publisher 2000
microsoft visio 2002
microsoft word 2000
microsoft word viewer 2003

Referencias y parches

Coincidencias CPE (NVD) (34)

  • cpe:2.3:a:microsoft:access:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:access:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:access:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:frontpage:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:frontpage:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:frontpage:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:infopath:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*
  • cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:onenote:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:project:2000:sr1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:project:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:publisher:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:publisher:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:visio:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word_viewer:2003:*:*:*:*:*:*:*