Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.

The remote host is running a version of Microsoft Office that may allow arbitrary code to be run.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Office.

The remote host is running a version of Microsoft Office that is affected by various flaws that may allow arbitrary code to be run.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Word or another Office application.

ID	Name	Product	Family	Type	Severity
24339	MS07-015: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554)	Nessus	Windows : Microsoft Bulletins	Local	high
24328	MS07-014 / MS07-015: Vulnerabilities in Microsoft Word and Office Could Allow Remote Code Execution (929434 / 932554) (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2007-0671

high

Tenable Plugins

high

high