CVE-2007-3490
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown...
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
- Record
CVE-2007-3490- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
- Record
CVE-2007-3490- Updated
- 2026-11-02
EUVDEUVD-2007-3475 No score
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
- Record
EUVD-2007-3475- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gv8q-4r76-rh77 No score
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown...
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
- Record
GHSA-gv8q-4r76-rh77- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Excel 2000/2003 - Sheet Name (PoC) | 2007-06-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3490 is a high vulnerability (CVSS 7.5) in Microsoft Excel, published June 29, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 36.6%, the 98th percentile. No source names a fixed version.
References
exploit-db.com/exploits/4121
exchange.xforce.ibmcloud.com/vulnerabilities/35132
securityfocus.com/bid/24691
milw0rm.com/sploits/06272007-2670.zip
pstgroup.blogspot.com/2007/06/exploitmicrosoft-excel-20002003-sheet.html
securitytracker.com/id?1018321
osvdb.org/38954
nvd.nist.gov/vuln/detail/CVE-2007-3490
github.com/advisories/GHSA-gv8q-4r76-rh77