{"id":"CVE-2007-0671","kind":"vulnerability","aliases":["CVE-2007-0671"],"related":[],"title":"Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products,…","description":"Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"A remote code execution flaw in Microsoft Excel lets an attacker run code on a victim's computer when a specially crafted Excel file is opened. The file can arrive as an email attachment or be hosted on a malicious website, and CISA lists it as actively exploited.","severity":"critical","cvss":9.3,"epss":null,"exploited":true,"exploited_at":"2025-08-12T00:00:00+00:00","products":[{"name":"Microsoft Office","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"microsoft access","fixed":[],"affected":"= 2000","ecosystem":"vendor"},{"name":"microsoft access","fixed":[],"affected":"= 2002","ecosystem":"vendor"},{"name":"microsoft access","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft excel","fixed":[],"affected":"= 2000","ecosystem":"vendor"},{"name":"microsoft excel","fixed":[],"affected":"= 2002","ecosystem":"vendor"},{"name":"microsoft excel","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft excel viewer","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft frontpage","fixed":[],"affected":"= 2000","ecosystem":"vendor"},{"name":"microsoft frontpage","fixed":[],"affected":"= 2002","ecosystem":"vendor"},{"name":"microsoft frontpage","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft infopath","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft office","fixed":[],"affected":"= 2000","ecosystem":"vendor"},{"name":"microsoft office","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft office","fixed":[],"affected":"= 2004","ecosystem":"vendor"},{"name":"microsoft office","fixed":[],"affected":"= xp","ecosystem":"vendor"},{"name":"microsoft onenote","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft outlook","fixed":[],"affected":"= 2000","ecosystem":"vendor"},{"name":"microsoft outlook","fixed":[],"affected":"= 2002","ecosystem":"vendor"},{"name":"microsoft outlook","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft powerpoint","fixed":[],"affected":"= 2000","ecosystem":"vendor"},{"name":"microsoft powerpoint","fixed":[],"affected":"= 2002","ecosystem":"vendor"},{"name":"microsoft powerpoint","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft project","fixed":[],"affected":"= 2000","ecosystem":"vendor"},{"name":"microsoft project","fixed":[],"affected":"= 2002","ecosystem":"vendor"},{"name":"microsoft project","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft publisher","fixed":[],"affected":"= 2000","ecosystem":"vendor"},{"name":"microsoft publisher","fixed":[],"affected":"= 2002","ecosystem":"vendor"},{"name":"microsoft publisher","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft visio","fixed":[],"affected":"= 2002","ecosystem":"vendor"},{"name":"microsoft visio","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft word","fixed":[],"affected":"= 2000","ecosystem":"vendor"},{"name":"microsoft word","fixed":[],"affected":"= 2002","ecosystem":"vendor"},{"name":"microsoft word","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft word viewer","fixed":[],"affected":"= 2003","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["excel","exploited","microsoft-office","vendor","windows"],"not_affected_if":["unknown"],"how_to_check":"Identify installed Microsoft Office/Excel versions and compare against the Microsoft security bulletin for CVE-2007-0671.","fix":"Apply the vendor mitigations or patches from Microsoft for CVE-2007-0671; if they are unavailable, discontinue use of the affected Excel product as CISA directs.","status":"open","published_at":"2007-02-03T01:28:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:46:36+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T20:46:36Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor mitigations or patches from Microsoft for CVE-2007-0671; if they are unavailable, discontinue use of the affected Excel product as CISA directs.\nunknown","reach":"internet","summary":"A remote code execution flaw in Microsoft Excel lets an attacker run code on a victim's computer when a specially crafted Excel file is opened. The file can arrive as an email attachment or be hosted on a malicious website, and CISA lists it as actively exploited.","category":"vendor","who_cares":["microsoft-office","excel","windows"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the victim's machine after they open a crafted file.","analyst_note":"Confirm affected Excel versions and the Microsoft patch or mitigation guidance for CVE-2007-0671 from the Microsoft security bulletin and the CISA KEV entry.","how_to_check":"Identify installed Microsoft Office/Excel versions and compare against the Microsoft security bulletin for CVE-2007-0671.\nunknown\nunknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000481,"input_tokens":2601,"output_tokens":441,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':227C '-0671':20A,23A '-2007':19A,22A '2000':6A '2003':8A '2004':10A '22':226C 'access':27A,29A,31A 'action':217C 'activ':149B 'affect':213C 'allow':204C 'appli':218C 'applic':224C 'arriv':132B 'attach':136B,181C 'attack':113B,189C,206C 'bod':225C 'cisa':145B,215C 'cloud':230C 'code':105B,115B,157C,210C 'comput':120B 'contain':154C 'could':175C,190C 'craft':124B,167C,198C 'creat':195C 'cve':18A,21A 'deliv':177C 'discontinu':233C 'email':135B,180C 'excel':5A,33A,35A,37A,39A,96B,110B,125B,153C,168C,199C 'execut':106B,158C,208C 'exploit':97B,150B,163C 'file':126B,130B,169C,174C,200C 'flaw':107B 'follow':223C 'frontpage':42A,44A,46A 'guidanc':228C 'host':139B,183C 'infopath':48A 'instruct':222C 'let':111B 'leverag':191C 'list':146B 'mac':12A 'malici':142B,173C,186C 'microsoft':4A,24A,26A,28A,30A,32A,34A,36A,38A,41A,43A,45A,47A,49A,51A,53A,55A,57A,59A,61A,63A,65A,67A,69A,71A,73A,75A,77A,79A,81A,83A,85A,87A,89A,91A,93A,99B,109B,151C 'microsoft-offic':98B 'mitig':219C,239C 'offic':16A,100B,152C 'office':25A,50A,52A,54A,56A 'onenote':58A 'open':128B,171C,203C 'outlook':60A,62A,64A 'per':220C 'possibl':14A 'powerpoint':66A,68A,70A 'product':17A,237C 'project':72A,74A,76A 'publisher':78A,80A,82A 'remot':104B,156C,209C 'requir':216C 'run':114B 'servic':231C 'special':123B,166C,197C 'system':214C 'unavail':241C 'unspecifi':1A 'use':234C 'vendor':101B,221C 'victim':118B 'viewer':40A,95A 'visio':84A,86A 'vulner':2A,159C,193C 'websit':143B,187C 'window':102B 'word':88A,90A,92A,94A 'xp':7A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2007-02-03T01:28:00+00:00","kev":{"dateAdded":"2025-08-12","dueDate":"2025-09-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2007-0671","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2007-0671","severity":null,"published_at":"2025-08-12T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T16:39:46+00:00","note":null},{"source":"nvd","external_id":"CVE-2007-0671","url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0671","severity":null,"published_at":"2007-02-03T01:28:00+00:00","modified_at":"2026-06-16T22:36:02+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}