CVE - CVE-2007-0028

CVE-ID
CVE-2007-0028	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an early disclosure of this issue used CVE-2006-3432, but only CVE-2007-0028 should be used.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:21952 URL:http://www.securityfocus.com/bid/21952 CERT:TA07-009A URL:http://www.us-cert.gov/cas/techalerts/TA07-009A.html CERT-VN:VU#493185 URL:http://www.kb.cert.org/vuls/id/493185 HP:HPSBST02184 URL:http://www.securityfocus.com/archive/1/457274/100/0/threaded HP:SSRT071296 URL:http://www.securityfocus.com/archive/1/457274/100/0/threaded MISC:http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-30.html MISC:http://www.fortinet.com/FortiGuardCenter/advisory/FGA-2007-01.html MS:MS07-002 URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002 OSVDB:31249 URL:~~http://www.osvdb.org/31249~~ (Obsolete source) OVAL:oval:org.mitre.oval:def:768 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A768 SECTRACK:1017485 URL:http://securitytracker.com/id?1017485 SECUNIA:23676 URL:http://secunia.com/advisories/23676 VUPEN:ADV-2007-0103 URL:~~http://www.vupen.com/english/advisories/2007/0103~~ (Obsolete source)
Assigning CNA
Microsoft Corporation
Date Record Created
20070103	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20070103)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)