CVE-2007-1203 : Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003

Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote attackers to execute arbitrary code via a crafted set font value in an Excel file, which results in memory corruption.

Published 2007-05-08 22:19:00

Updated 2018-10-16 16:37:04

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Memory CorruptionExecute code

Products affected by CVE-2007-1203

Microsoft » Excel » Version: 2002 Update SP3
cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Excel » Version: 2000 Update SP3
cpe:2.3:a:microsoft:excel:2000:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Excel » Version: 2007
cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*
Matching versions
Microsoft » Excel » Version: 2004 MAC Edition
cpe:2.3:a:microsoft:excel:2004:*:mac:*:*:*:*:*
Matching versions
Microsoft » Excel » Version: 2003 Update SP2
cpe:2.3:a:microsoft:excel:2003:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Excel Viewer » Version: 2003
cpe:2.3:a:microsoft:excel_viewer:2003:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-1203

EPSS FAQ

89.16%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-1203

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2007-1203

Jump to

Vulnerability Details : CVE-2007-1203

Products affected by CVE-2007-1203

Exploit prediction scoring system (EPSS) score for CVE-2007-1203

CVSS scores for CVE-2007-1203

References for CVE-2007-1203