CVE

Id
26387  
CVE No.
CVE-2007-3030  
Status
Candidate  
Description
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the "denoting [of] the start of a Workspace designation", which results in memory corruption, aka the "Workbook Memory Corruption Vulnerability".  
Phase
Assigned (20070605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267280 26387 CVE-2007-3030 HP:SSRT071446  View
267281 26387 CVE-2007-3030 URL:http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html  View
267282 26387 CVE-2007-3030 MS:MS07-036  View
267283 26387 CVE-2007-3030 URL:http://www.microsoft.com/technet/security/Bulletin/ms07-036.mspx  View
267284 26387 CVE-2007-3030 CERT:TA07-191A  View
267285 26387 CVE-2007-3030 URL:http://www.us-cert.gov/cas/techalerts/TA07-191A.html  View
267286 26387 CVE-2007-3030 BID:24803  View
267287 26387 CVE-2007-3030 URL:http://www.securityfocus.com/bid/24803  View
267288 26387 CVE-2007-3030 OSVDB:35959  View
267289 26387 CVE-2007-3030 URL:http://osvdb.org/35959  View
267290 26387 CVE-2007-3030 VUPEN:ADV-2007-2478  View
267291 26387 CVE-2007-3030 URL:http://www.vupen.com/english/advisories/2007/2478  View
267292 26387 CVE-2007-3030 OVAL:oval:org.mitre.oval:def:1709  View
267293 26387 CVE-2007-3030 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1709  View
267294 26387 CVE-2007-3030 SECTRACK:1018352  View
267295 26387 CVE-2007-3030 URL:http://www.securitytracker.com/id?1018352  View
267296 26387 CVE-2007-3030 SECUNIA:25995  View
267297 26387 CVE-2007-3030 URL:http://secunia.com/advisories/25995  View
267298 26387 CVE-2007-3030 XF:excel-workspace-designation-code-execution(35217)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51945 JVNDB-2007-000608 Microsoft Windows Vista における連絡先のガジェットにおける任意のコードを実行可能な脆弱性 Microsoft Windows Vista における連絡先のガジェットには、連絡先のファイルをインポートする際、十分な検証を行わないために任意のコードを実行可能な脆弱性が存在します。 CVE-2007-3032 26387 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000608.html  View