Vulnerabilities > Microsoft > Excel > 2003
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-01-09 | CVE-2007-0029 | Remote Code Execution vulnerability in Microsoft Excel Malformed String Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string, aka "Excel Malformed String Vulnerability." | 9.3 |
| 2007-01-09 | CVE-2007-0028 | Improper Input Validation vulnerability in Microsoft products Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an early disclosure of this issue used CVE-2006-3432, but only CVE-2007-0028 should be used. | 9.3 |
| 2007-01-09 | CVE-2007-0027 | Remote Code Execution vulnerability in Microsoft Excel IMDATA Record Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via malformed IMDATA records that trigger memory corruption. | 9.3 |
| 2006-10-10 | CVE-2006-3877 | Code Injection vulnerability in Microsoft products Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876. | 9.3 |
| 2006-10-10 | CVE-2006-3875 | Remote Code Execution vulnerability in Microsoft Excel COLINFO Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted COLINFO record in an XLS file, a different vulnerability than CVE-2006-2387 and CVE-2006-3867. | 5.1 |
| 2006-10-10 | CVE-2006-3867 | Remote Code Execution vulnerability in Microsoft Excel Lotus 1-2-3 File Handling Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, and Excel Viewer 2003 allows user-assisted attackers to execute arbitrary code via a crafted Lotus 1-2-3 file, a different vulnerability than CVE-2006-2387 and CVE-2006-3875. | 5.1 |
| 2006-07-13 | CVE-2006-1309 | Code Injection vulnerability in Microsoft Excel and Excel Viewer Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted LABEL record that triggers memory corruption. | 9.3 |
| 2006-07-13 | CVE-2006-1308 | Remote Code Execution vulnerability in Microsoft Excel FNGROUPCOUNT Record Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted FNGROUPCOUNT value. | 9.3 |
| 2006-07-13 | CVE-2006-1301 | Code Injection vulnerability in Microsoft Excel and Excel Viewer Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted SELECTION record that triggers memory corruption, a different vulnerability than CVE-2006-1302. | 9.3 |
| 2006-07-13 | CVE-2006-2388 | Code Injection vulnerability in Microsoft Excel and Excel Viewer Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process. | 9.3 |