What’s Vulnerable › Vulnerabilities

CVE-2007-0027

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 31.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-01-09 · updated 2026-06-16

Description

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption.

Affected products

• Microsoft Excel 2013 Service Pack 1: 2000, 2002, 2003
• Microsoft Excel Viewer: 2003
• Microsoft Office: 2000-sp3, xp-sp3, 2003-sp2, 2004, v.x
• Microsoft Works: 2004, 2005

References

• http://securitytracker.com/id?1017487
• http://www.kb.cert.org/vuls/id/749964
• http://www.osvdb.org/31255
• http://www.securityfocus.com/archive/1/457274/100/0/threaded
• http://www.securityfocus.com/bid/21856
• http://www.us-cert.gov/cas/techalerts/TA07-009A.html
• http://www.vupen.com/english/advisories/2007/0103
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A119
• http://securitytracker.com/id?1017487
• http://www.kb.cert.org/vuls/id/749964
• http://www.osvdb.org/31255

Get alerted when CVE-2007-0027 or the next vulnerability affects your stack