返回 CVE 瀏覽器

CVE-2007-1203

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.1830%

EPSS Percentile38.35th

Published2007年5月8日

Last Modified2026年4月23日

Vulnerability Description

Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption.

Affected Platforms (CPE)

📦

Microsoft

Excel

= 2000

📦

Microsoft

Excel

= 2002

📦

Microsoft

Excel

= 2003

📦

Microsoft

Excel

= 2004

📦

Microsoft

Excel

= 2007

📦

Microsoft

Excel Viewer

= 2003

References & Advisories

🔗 http://secunia.com/advisories/25150

🔗 http://www.osvdb.org/34394

🔗 http://www.securityfocus.com/archive/1/468871/100/200/threaded

🔗 http://www.securityfocus.com/bid/23779

🔗 http://www.securitytracker.com/id?1018012

🔗 http://www.us-cert.gov/cas/techalerts/TA07-128A.html

🔗 http://www.vupen.com/english/advisories/2007/1708

🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-023

相關漏洞威脅

CVE-2008-421110.0

Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iP...

CVE-2015-098410.0

Directory traversal vulnerability in the FTP server on Honeywell Excel Web XL1000C50 52 I/O, XL1000C100 104 I/O, XL1000C500 300 I/...

CVE-2004-130110.0

Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitrary code v...

CVE-2019-112329.8

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sendin...