CVE-2007-1214 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Excel

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
62.8%
top 1.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft ExcelMicrosoft Excel Viewer
Timeline
PublishedMay 8
Latest updateMay 1

Description

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDmicrosoft/excel4 versions+3

Patches

Patch: labs.idefense.com ↗Patch: secunia.com ↗Patch: www.securitytracker.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-v7j8-f2f4-23f6: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a craf↗2022-05-01
▶
CVEList
CVE-2007-1214: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a craf↗2007-05-08
▶

💥Exploits & PoCs

1
Exploit-DB
KMPlayer 2.9.3.1214 - Multiple Remote Denial of Service Vulnerabilities↗2007-09-12
▶
CVE-2007-1214 — Microsoft Excel vulnerability | cvebase