CVE-2007-0671

high · 8.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Added 2025-08-12Remediation due 2025-09-02

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.

8.8

CVSS

42.4%

EPSS (exploit prob.)

99th

EPSS percentile

2007-02-03

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
microsoft	access	2000
microsoft	access	2002
microsoft	access	2003
microsoft	excel	2000
microsoft	excel	2002
microsoft	excel	2003
microsoft	excel_viewer	2003
microsoft	frontpage	2000
microsoft	frontpage	2002
microsoft	frontpage	2003
microsoft	infopath	2003
microsoft	office	2000
microsoft	office	2003
microsoft	office	2004
microsoft	office	xp
microsoft	onenote	2003
microsoft	outlook	2000
microsoft	outlook	2002
microsoft	outlook	2003
microsoft	powerpoint	2000
microsoft	powerpoint	2002
microsoft	powerpoint	2003
microsoft	project	2000
microsoft	project	2002
microsoft	project	2003
microsoft	publisher	2000
microsoft	publisher	2002
microsoft	publisher	2003
microsoft	visio	2002
microsoft	visio	2003
microsoft	word	2000
microsoft	word	2002
microsoft	word	2003
microsoft	word_viewer	2003

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-0671