VULNERABILITY INTELLIGENCE
CVE-2007-1214
CVSS score6.8 MEDIUM
EPSS probability28.48%
CISA KEVNot currently listed
Published2007-05-08
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- secure@microsoft.com — Patch
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com — US Government Resource
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com — Patch
- secure@microsoft.com — US Government Resource
- secure@microsoft.com — Vendor Advisory
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com