CVE-2007-0671: Microsoft Office Excel remote code execution vulnerability

CVE-2007-0671 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2025-08-12

Microsoft Excel is a widely used spreadsheet application for data analysis and reporting. A vulnerability in older versions of Excel allows an attacker to take full control of a computer if a user opens a specially crafted malicious spreadsheet. This could lead to the theft of sensitive company data, installation of malware, or complete disruption of business operations.

Technologies: Microsoft Excel, Microsoft Office. Vendors: Microsoft.

Quick answers

Is CVE-2007-0671 exploited in the wild?
Yes. CVE-2007-0671 is known to be exploited in the wild, first recorded on 12 August 2025. Treat it as urgent.
How severe is CVE-2007-0671?
Critical severity, with a CVSS score of 8.8, published 12 August 2025.
Which products and versions are affected?
Microsoft Excel 2000, XP, 2003, 2004 for Mac; Microsoft Office 2000, XP, 2003, 2004 for Mac.
Is there a fix for CVE-2007-0671?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2007-0671 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2007-0671?
Check whether you run Microsoft Excel or Microsoft Office at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac allows remote attackers to execute arbitrary code. The attack requires user interaction, typically involving a victim opening a maliciously crafted Excel (.xls) file delivered via email or a website. Successful exploitation grants the attacker the same privileges as the logged-in user, potentially leading to full system compromise. This vulnerability has been observed in targeted zero-day attacks. Microsoft has released security bulletin MS07-015 to address this issue.

Affected products

  • Microsoft Excel 2000, XP, 2003, 2004 for Mac
  • Microsoft Office 2000, XP, 2003, 2004 for Mac

Timeline

  • 2007-02-13: advisory: Microsoft released security bulletin MS07-015
  • 2025-08-12: kev added: Added to CISA Known Exploited Vulnerabilities catalog

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.