[ CVE-2007-0671 · Published 3 Feb 2007 ]
Microsoft Office Excel Remote Code Execution Vulnerability
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2025-08-12
- EPSS: 43% chance of exploitation in the next 30 days (higher than 99% of CVEs)
[ Description ]Official description
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
CISA: Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 2 Sep 2025): Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ References ]References
- osvdb.org/31901Broken Link
- secunia.com/advisories/24008Broken LinkVendor Advisory
- securitytracker.com/idBroken Link
- vil.nai.com/vil/content/v_141393.htmBroken Link
- www.avertlabs.com/research/blogBroken Link
- www.kb.cert.org/vuls/id/613740US Government Resource
- www.microsoft.com/technet/security/advisory/932553.mspxBroken LinkVendor Advisory
- www.securityfocus.com/bid/22383Broken Link
- www.us-cert.gov/cas/techalerts/TA07-044A.htmlBroken LinkUS Government Resource
- www.vupen.com/english/advisories/2007/0463Vendor Advisory
- docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015Vendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/32178Third Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301Broken Link
- learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015Vendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource