CVE-2007-0671: Microsoft Office Excel Remote Code Execution Vulnerability

CISA Known Exploited Vulnerabilities

Name

Microsoft Office Excel Remote Code Execution Vulnerability

Vendor

Microsoft

Product

Office

Added to the catalog

2025-08-12

Due date for US federal agencies

2025-09-02

Catalog version

2026.10.30

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.

Required action (CISA)

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransomware use: CISA does not mark known use of this vulnerability in ransomware campaigns.

Links in CISA's notes

• https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015
• https://nvd.nist.gov/vuln/detail/CVE-2007-0671

Read on 2026-11-02T23:39:54.475Z under licence cisa-kev-cc0@b0067899 from https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

NVD analysis

Status

Analyzed

Published

2007-02-03T01:28:00.000

Last modified

2026-06-16T22:36:02.527

Weaknesses

NVD-CWE-noinfo

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.

References

• http://osvdb.org/31901 (Broken Link)
• http://secunia.com/advisories/24008 (Broken Link, Vendor Advisory)
• http://securitytracker.com/id?1017584 (Broken Link)
• http://vil.nai.com/vil/content/v_141393.htm (Broken Link)
• http://www.avertlabs.com/research/blog/?p=191 (Broken Link)
• http://www.kb.cert.org/vuls/id/613740 (US Government Resource)
• http://www.microsoft.com/technet/security/advisory/932553.mspx (Broken Link, Vendor Advisory)
• http://www.securityfocus.com/bid/22383 (Broken Link)
• http://www.us-cert.gov/cas/techalerts/TA07-044A.html (Broken Link, US Government Resource)
• http://www.vupen.com/english/advisories/2007/0463 (Vendor Advisory)
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 (Vendor Advisory)
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32178 (Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301 (Broken Link)
• http://osvdb.org/31901 (Broken Link)
• http://secunia.com/advisories/24008 (Broken Link, Vendor Advisory)
• http://securitytracker.com/id?1017584 (Broken Link)
• http://vil.nai.com/vil/content/v_141393.htm (Broken Link)
• http://www.avertlabs.com/research/blog/?p=191 (Broken Link)
• http://www.kb.cert.org/vuls/id/613740 (US Government Resource)
• http://www.microsoft.com/technet/security/advisory/932553.mspx (Broken Link, Vendor Advisory)
• http://www.securityfocus.com/bid/22383 (Broken Link)
• http://www.us-cert.gov/cas/techalerts/TA07-044A.html (Broken Link, US Government Resource)
• http://www.vupen.com/english/advisories/2007/0463 (Vendor Advisory)
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 (Vendor Advisory)
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32178 (Third Party Advisory)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301 (Broken Link)
• https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 (Vendor Advisory)
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-0671 (US Government Resource)

This product uses the NVD API but is not endorsed or certified by the NVD.

Read on 2026-11-02T23:41:28.906Z under licence nvd-api-terms-of-use@ff2a5288 from https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2007-0671

CVE record

Assigner

microsoft

State

PUBLISHED

Published

2007-02-03T01:00:00.000Z

Updated

2026-01-12T21:01:27.416Z

Problem types

n/a

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.

References

• ADV-2007-0463
• oval:org.mitre.oval:def:301
• 31901
• http://www.microsoft.com/technet/security/advisory/932553.mspx
• VU#613740
• 1017584
• http://www.avertlabs.com/research/blog/?p=191
• 24008
• TA07-044A
• MS07-015
• office-unspecified-code-execution(32178)
• http://vil.nai.com/vil/content/v_141393.htm
• 22383

Read on 2026-11-03T00:11:49.136Z under licence cve-terms-of-use@81bfa2f3 from https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2007/0xxx/CVE-2007-0671.json