CVE-2007-0671
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other...
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
Exploit likelihood
What each source reports
CVE List
8.8
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
- Record
CVE-2007-0671- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2007-0668
8.8
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
- Record
EUVD-2007-0668- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-h24h-phxr-rg3x
8.8
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other...
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
- Record
GHSA-h24h-phxr-rg3x- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
CISA KEV No score
Microsoft Office Excel Remote Code Execution Vulnerability
Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.
- Record
CVE-2007-0671- Updated
- 2026-11-02
NVD
8.8
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
- Record
CVE-2007-0671- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
Affected products
- microsoft excel
- microsoft office
- microsoft access
- microsoft excel viewer
- microsoft frontpage
- microsoft infopath
- microsoft onenote
- microsoft outlook
- microsoft powerpoint
- microsoft project
- microsoft publisher
- microsoft visio
Show 2 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, CISA KEV, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0671 is a high vulnerability (CVSS 9.3) in Microsoft Excel, published February 3, 2007. CISA lists it as known to be exploited, since August 12, 2025. EUVD reports exploitation since August 12, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 44.1%, the 98th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/0463
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301
osvdb.org/31901
microsoft.com/technet/security/advisory/932553.mspx
kb.cert.org/vuls/id/613740
securitytracker.com/id?1017584
Show 11 moreShow less
avertlabs.com/research/blog?p=191
secunia.com/advisories/24008
us-cert.gov/cas/techalerts/TA07-044A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015
exchange.xforce.ibmcloud.com/vulnerabilities/32178
vil.nai.com/vil/content/v_141393.htm
securityfocus.com/bid/22383
learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-0671
nvd.nist.gov/vuln/detail/CVE-2007-0671
github.com/advisories/GHSA-h24h-phxr-rg3x