CVE-2007-0031: microsoft excel
Vulnerability summary
CVE-2007-0031 is a high (CVSS 9.3) vulnerability in microsoft excel. EPSS estimates a 42.18% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 09-01-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to execute arbitrary code via a BIFF8 spreadsheet with a PALETTE record that contains a large number of entries.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
42.18%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.24 pp
From 41.93% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Excel - Malformed Palette Record Denial of Service (PoC) (MS07-002)
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft4 products
- excel2000 | 2002 | 2003
- excel_viewer2003
- office2000:sp3 | xp:sp3 | 2003:sp2 | 2004 | v.x
- works2004 | 2005
1 vendor · 4 products
References
10 links- www.us-cert.gov/cas/techalerts/TA07-009A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- labs.idefense.com/intelligence/vulnerabilities/display.php?id=461Third Party AdvisoryX Refsource IDEFENSEPatchVendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-002Vendor AdvisoryX Refsource MS- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A753VDB EntrySignatureX Refsource OVAL