Back to CVE Browser

CVE-2007-1203

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.1830%

EPSS Percentile38.35th

PublishedMay 8, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption.

Affected Platforms (CPE)

📦

Microsoft

Excel

= 2000

📦

Microsoft

Excel

= 2002

📦

Microsoft

Excel

= 2003

📦

Microsoft

Excel

= 2004

📦

Microsoft

Excel

= 2007

📦

Microsoft

Excel Viewer

= 2003

References & Advisories

🔗 http://secunia.com/advisories/25150

🔗 http://www.osvdb.org/34394

🔗 http://www.securityfocus.com/archive/1/468871/100/200/threaded

🔗 http://www.securityfocus.com/bid/23779

🔗 http://www.securitytracker.com/id?1018012

🔗 http://www.us-cert.gov/cas/techalerts/TA07-128A.html

🔗 http://www.vupen.com/english/advisories/2007/1708

🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-023

Related Vulnerabilities

CVE-2008-421110.0

Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iP...

CVE-2015-098410.0

Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I/O, XL1000C100 104 I/O, XL1000C500 300 I/...

CVE-2004-130110.0

Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitrary code v...

CVE-2019-112329.8

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sendin...