CVE-2007-0215 — Out-of-bounds Write in Microsoft Excel

3 documents3 sources
Severity
7.6HIGHNVD
EPSS
60.5%
top 1.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft ExcelMicrosoft Excel ViewerMicrosoft Office
Timeline
PublishedMay 8
Latest updateMay 1

Description

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a .XLS BIFF file with a malformed Named Graph record, which results in memory corruption.

CVSS vector

AV:N/AC:H/C:C/I:C/A:CExploitability: 4.9 | Impact: 10.0

Affected Packages3 packages

▶NVDmicrosoft/excel4 versions+3
▶NVDmicrosoft/office5 versions+4

Patches

Patch: www.zerodayinitiative.com ↗Patch: www.zerodayinitiative.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qrf2-pp97-g3xq: Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrar↗2022-05-01
▶
CVEList
CVE-2007-0215: Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrar↗2007-05-09
▶
CVE-2007-0215 — Out-of-bounds Write in Microsoft Excel | cvebase