# CVE-2007-0671: Microsoft Office Excel remote code execution vulnerability

Source: https://junglewise.ai/threats/cve-2007-0671-microsoft-office-excel-remote-code-execution-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-08-12. Updated: 2026-05-15  
License: CC BY 4.0 with a link back

CVE-2007-0671 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2025-08-12

Microsoft Excel is a widely used spreadsheet application for data analysis and reporting. A vulnerability in older versions of Excel allows an attacker to take full control of a computer if a user opens a specially crafted malicious spreadsheet. This could lead to the theft of sensitive company data, installation of malware, or complete disruption of business operations.

Technologies: [Microsoft Excel](https://junglewise.ai/threats/technologies/excel), [Microsoft Office](https://junglewise.ai/threats/technologies/office). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2007-0671 exploited in the wild?** Yes. CVE-2007-0671 is known to be exploited in the wild, first recorded on 12 August 2025. Treat it as urgent.

**How severe is CVE-2007-0671?** Critical severity, with a CVSS score of 8.8, published 12 August 2025.

**Which products and versions are affected?** Microsoft Excel 2000, XP, 2003, 2004 for Mac; Microsoft Office 2000, XP, 2003, 2004 for Mac.

**Is there a fix for CVE-2007-0671?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2007-0671 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2007-0671?** Check whether you run Microsoft Excel or Microsoft Office at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac allows remote attackers to execute arbitrary code. The attack requires user interaction, typically involving a victim opening a maliciously crafted Excel (.xls) file delivered via email or a website. Successful exploitation grants the attacker the same privileges as the logged-in user, potentially leading to full system compromise. This vulnerability has been observed in targeted zero-day attacks. Microsoft has released security bulletin MS07-015 to address this issue.

## Affected products

- Microsoft Excel 2000, XP, 2003, 2004 for Mac
- Microsoft Office 2000, XP, 2003, 2004 for Mac

## Timeline

- 2007-02-13: advisory: Microsoft released security bulletin MS07-015
- 2025-08-12: kev added: Added to CISA Known Exploited Vulnerabilities catalog

## Related threats

- [Microsoft Office Outlook user warning spoofing vulnerability](https://junglewise.ai/threats/cve-2026-124194-microsoft-office-outlook-missing-user-interaction-for)
- [Microsoft Office heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-122198-heap-based-buffer-overflow-in-microsoft-office-allows-an)
- [Microsoft Excel heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-120786-heap-based-buffer-overflow-in-microsoft-office-excel-allows-an)
- [Microsoft Office heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-120003-heap-based-buffer-overflow-in-microsoft-office-allows-an)
- [Microsoft Office UI security feature bypass](https://junglewise.ai/threats/cve-2026-119998-product-ui-does-not-warn-user-of-unsafe-actions-in-microsoft)