---
id: "CVE-2007-0671"
kind: "vulnerability"
aliases: ["CVE-2007-0671"]
title: "Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products,\u2026"
severity: "critical"
cvss: 9.3
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Microsoft Office", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft access", "fixed": [], "affected": "= 2000", "ecosystem": "vendor"}, {"name": "microsoft access", "fixed": [], "affected": "= 2002", "ecosystem": "vendor"}, {"name": "microsoft access", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft excel", "fixed": [], "affected": "= 2000", "ecosystem": "vendor"}, {"name": "microsoft excel", "fixed": [], "affected": "= 2002", "ecosystem": "vendor"}, {"name": "microsoft excel", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft excel viewer", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft frontpage", "fixed": [], "affected": "= 2000", "ecosystem": "vendor"}, {"name": "microsoft frontpage", "fixed": [], "affected": "= 2002", "ecosystem": "vendor"}, {"name": "microsoft frontpage", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft infopath", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft office", "fixed": [], "affected": "= 2000", "ecosystem": "vendor"}, {"name": "microsoft office", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft office", "fixed": [], "affected": "= 2004", "ecosystem": "vendor"}, {"name": "microsoft office", "fixed": [], "affected": "= xp", "ecosystem": "vendor"}, {"name": "microsoft onenote", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft outlook", "fixed": [], "affected": "= 2000", "ecosystem": "vendor"}, {"name": "microsoft outlook", "fixed": [], "affected": "= 2002", "ecosystem": "vendor"}, {"name": "microsoft outlook", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft powerpoint", "fixed": [], "affected": "= 2000", "ecosystem": "vendor"}, {"name": "microsoft powerpoint", "fixed": [], "affected": "= 2002", "ecosystem": "vendor"}, {"name": "microsoft powerpoint", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft project", "fixed": [], "affected": "= 2000", "ecosystem": "vendor"}, {"name": "microsoft project", "fixed": [], "affected": "= 2002", "ecosystem": "vendor"}, {"name": "microsoft project", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft publisher", "fixed": [], "affected": "= 2000", "ecosystem": "vendor"}, {"name": "microsoft publisher", "fixed": [], "affected": "= 2002", "ecosystem": "vendor"}, {"name": "microsoft publisher", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft visio", "fixed": [], "affected": "= 2002", "ecosystem": "vendor"}, {"name": "microsoft visio", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft word", "fixed": [], "affected": "= 2000", "ecosystem": "vendor"}, {"name": "microsoft word", "fixed": [], "affected": "= 2002", "ecosystem": "vendor"}, {"name": "microsoft word", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}, {"name": "microsoft word viewer", "fixed": [], "affected": "= 2003", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["excel", "exploited", "microsoft-office", "vendor", "windows"]
not_affected_if: ["unknown"]
published_at: "2007-02-03T01:28:00+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2007-0671", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0671", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products,…

A remote code execution flaw in Microsoft Excel lets an attacker run code on a victim's computer when a specially crafted Excel file is opened. The file can arrive as an email attachment or be hosted on a malicious website, and CISA lists it as actively exploited.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Office affected ? fixed ?
- vendor:microsoft access affected = 2000 fixed ?
- vendor:microsoft access affected = 2002 fixed ?
- vendor:microsoft access affected = 2003 fixed ?
- vendor:microsoft excel affected = 2000 fixed ?
- vendor:microsoft excel affected = 2002 fixed ?
- vendor:microsoft excel affected = 2003 fixed ?
- vendor:microsoft excel viewer affected = 2003 fixed ?
- vendor:microsoft frontpage affected = 2000 fixed ?
- vendor:microsoft frontpage affected = 2002 fixed ?
- vendor:microsoft frontpage affected = 2003 fixed ?
- vendor:microsoft infopath affected = 2003 fixed ?
- vendor:microsoft office affected = 2000 fixed ?
- vendor:microsoft office affected = 2003 fixed ?
- vendor:microsoft office affected = 2004 fixed ?
- vendor:microsoft office affected = xp fixed ?
- vendor:microsoft onenote affected = 2003 fixed ?
- vendor:microsoft outlook affected = 2000 fixed ?
- vendor:microsoft outlook affected = 2002 fixed ?
- vendor:microsoft outlook affected = 2003 fixed ?
- vendor:microsoft powerpoint affected = 2000 fixed ?
- vendor:microsoft powerpoint affected = 2002 fixed ?
- vendor:microsoft powerpoint affected = 2003 fixed ?
- vendor:microsoft project affected = 2000 fixed ?
- vendor:microsoft project affected = 2002 fixed ?
- vendor:microsoft project affected = 2003 fixed ?
- vendor:microsoft publisher affected = 2000 fixed ?
- vendor:microsoft publisher affected = 2002 fixed ?
- vendor:microsoft publisher affected = 2003 fixed ?
- vendor:microsoft visio affected = 2002 fixed ?
- vendor:microsoft visio affected = 2003 fixed ?
- vendor:microsoft word affected = 2000 fixed ?
- vendor:microsoft word affected = 2002 fixed ?
- vendor:microsoft word affected = 2003 fixed ?
- vendor:microsoft word viewer affected = 2003 fixed ?

## How to check

Identify installed Microsoft Office/Excel versions and compare against the Microsoft security bulletin for CVE-2007-0671.

## Fix

Apply the vendor mitigations or patches from Microsoft for CVE-2007-0671; if they are unavailable, discontinue use of the affected Excel product as CISA directs.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2007-0671
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2007-0671

## From the sources

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_