CVE-2007-1239

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-03-03 · updated 2026-06-16

Description

Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format or a (2) corrupted XLS format, which triggers a NULL pointer dereference.

Affected products

Microsoft Excel 2013 Service Pack 1: 2003, 2003-sp1, 2003-sp2

References

http://securityvulns.com/news/Microsoft/Excel/XML/DoS.html
http://www.securityfocus.com/archive/1/461373/100/0/threaded
http://www.securityfocus.com/bid/22717
http://securityvulns.com/news/Microsoft/Excel/XML/DoS.html
http://www.securityfocus.com/archive/1/461373/100/0/threaded
http://www.securityfocus.com/bid/22717

Get alerted when CVE-2007-1239 or the next vulnerability affects your stack