CVE-2007-3030 — Out-of-bounds Write in Microsoft Excel

3 documents3 sources
Severity
7.6HIGHNVD
EPSS
58.2%
top 1.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft ExcelMicrosoft Excel Viewer
Timeline
PublishedJul 10
Latest updateMay 1

Description

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability".

CVSS vector

AV:N/AC:H/C:C/I:C/A:CExploitability: 4.9 | Impact: 10.0

Affected Packages2 packages

▶NVDmicrosoft/excel5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-h2gp-f8gp-53cr: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel fi↗2022-05-01
▶
CVEList
CVE-2007-3030: Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel fi↗2007-07-10
▶
CVE-2007-3030 — Out-of-bounds Write in Microsoft Excel | cvebase