Lucene search

K
cve[email protected]CVE-2007-0027
HistoryJan 09, 2007 - 10:28 p.m.

CVE-2007-0027

2007-01-0922:28:00
web.nvd.nist.gov
33
cve-2007-0027
microsoft excel
remote code execution
memory corruption
vulnerability
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.921 High

EPSS

Percentile

99.0%

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.

Affected configurations

NVD
Node
microsoftexcelMatch2000
OR
microsoftofficeMatch2000sp3
Node
microsoftexcelMatch2002
OR
microsoftofficeMatchxpsp3
Node
microsoftexcelMatch2003
OR
microsoftofficeMatch2003sp2
Node
microsoftexcel_viewerMatch2003
OR
microsoftworksMatch2004
OR
microsoftworksMatch2005
Node
microsoftofficeMatch2004mac
OR
microsoftofficeMatchv.xmac

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.921 High

EPSS

Percentile

99.0%