CVE-2007-0027

Published: Jan 9, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.

Affected (11)

Products: Microsoft: Excel, Office, Excel Viewer, Works

4 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Version 2000
Microsoft Office	Version 2000 sp3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Version 2002
Microsoft Office	Version xp sp3

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Version 2003
Microsoft Office	Version 2003 sp2

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel Viewer	Version 2003
Microsoft Works	Version 2004
Microsoft Works	Version 2005

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2004
Microsoft Office	Version v.x

References (18)

http://securitytracker.com/id?1017487

Source: secure@microsoft.com

Patch

http://www.kb.cert.org/vuls/id/749964

Source: secure@microsoft.com

US Government Resource

http://www.osvdb.org/31255

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/457274/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/21856

Source: secure@microsoft.com

Patch

http://www.us-cert.gov/cas/techalerts/TA07-009A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2007/0103

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A119

Source: secure@microsoft.com

http://securitytracker.com/id?1017487