CVE-2007-3890
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac...
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
- Record
CVE-2007-3890- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
- Record
CVE-2007-3890- Updated
- 2026-11-02
EUVDEUVD-2007-3874 No score
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
- Record
EUVD-2007-3874- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-454x-wfc9-v689 No score
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac...
Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
- Record
GHSA-454x-wfc9-v689- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3890 is a high vulnerability (CVSS 9.3) in Microsoft Excel, published August 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 28.9%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2149
securityfocus.com/bid/25280
vupen.com/english/advisories/2007/2868
us-cert.gov/cas/techalerts/TA07-226A.html
secunia.com/advisories/26145
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-044
securitytracker.com/id?1018561
nvd.nist.gov/vuln/detail/CVE-2007-3890
github.com/advisories/GHSA-454x-wfc9-v689