CVE-2007-3490
published 2007-06-29CVE-2007-3490: Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet…
PriorityP350high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
36.55%
98.3th percentile
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | excel | — | — |
| microsoft | excel | — | — |
| microsoft | excel | — | — |
| microsoft | excel_viewer | — | — |
| microsoft | office | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vulncheck7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gv8q-4r76-rh77: Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to t
ghsa_unreviewed·2022-05-01
CVE-2007-3490 [HIGH] GHSA-gv8q-4r76-rh77: Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to t
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
GHSA
GHSA-h6j8-g36h-j99v: Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2008-0081 [HIGH] CWE-908 GHSA-h6j8-g36h-j99v: Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.
VulnCheck
Microsoft Excel Use of Uninitialized Resource
vulncheck·2008·CVSS 7.5
CVE-2008-0081 [HIGH] Microsoft Excel Use of Uninitialized Resource
Microsoft Excel Use of Uninitialized Resource
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.
Affected: Microsoft Excel
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-014
No detection rules found.
http://osvdb.org/38954http://pstgroup.blogspot.com/2007/06/exploitmicrosoft-excel-20002003-sheet.htmlhttp://www.milw0rm.com/sploits/06272007-2670.ziphttp://www.securityfocus.com/bid/24691http://www.securitytracker.com/id?1018321https://exchange.xforce.ibmcloud.com/vulnerabilities/35132https://www.exploit-db.com/exploits/4121http://osvdb.org/38954http://pstgroup.blogspot.com/2007/06/exploitmicrosoft-excel-20002003-sheet.htmlhttp://www.milw0rm.com/sploits/06272007-2670.ziphttp://www.securityfocus.com/bid/24691http://www.securitytracker.com/id?1018321https://exchange.xforce.ibmcloud.com/vulnerabilities/35132https://www.exploit-db.com/exploits/4121
2007-06-29
Published