CVE-2007-1214
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted...
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
Exploit likelihood
What each source reports
NVD Score used
6.8
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
- Record
CVE-2007-1214- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
- Record
CVE-2007-1214- Updated
- 2026-11-02
EUVDEUVD-2007-1211 No score
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
- Record
EUVD-2007-1211- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v7j8-f2f4-23f6 No score
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted...
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted AutoFilter filter record in an Excel BIFF8 format XLS file, which triggers memory corruption.
- Record
GHSA-v7j8-f2f4-23f6- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1214 is a medium vulnerability (CVSS 6.8) in Microsoft Excel, published May 8, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 28.5%, the 98th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/468871/100/200/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/33915
us-cert.gov/cas/techalerts/TA07-128A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-023
kb.cert.org/vuls/id/253825
labs.idefense.com/intelligence/vulnerabilities/display.php?id=527
Show 8 moreShow less
vupen.com/english/advisories/2007/1708
securitytracker.com/id?1018012
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2064
osvdb.org/34395
securityfocus.com/bid/23780
secunia.com/advisories/25150
nvd.nist.gov/vuln/detail/CVE-2007-1214
github.com/advisories/GHSA-v7j8-f2f4-23f6