Oval Definition:oval:org.mitre.oval:def:2149
Revision Date:2012-05-28Version:7
Title:Workspace Memory Corruption Vulnerability
Description:Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2007-3890
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Excel
Definition Synopsis
  • Excel 2000
  • Microsoft Excel 2000 is installed
  • AND the version of excel.exe is less than 9.0.0.8964
  • OR Excel 2002
  • Microsoft Excel 2002 is installed
  • AND the version of excel.exe is less than 10.0.6834.0
  • OR Excel 2003
  • Microsoft Excel 2003 is installed
  • AND the version of excel.exe is less than 11.0.8146.0
  • OR Excel Viewer
  • Microsoft Excel Viewer 2003 is installed
  • AND the version of xlview.exe is less than 11.0.8146.0
  • BACK