Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a Workspace with a certain index value that triggers memory corruption.

The remote Mac OS X host is running a version of Microsoft Office 2004 for Mac that is affected by several vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Office file or viewing a specially crafted web page, these issues could be leveraged to execute arbitrary code subject to the user's privileges.

The remote host is running a version of Microsoft Excel that is subject to various flaws that may allow arbitrary code to be run.  An attacker may use this to execute arbitrary code on this host.  To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Excel.

The remote host is running a version of Microsoft Excel that is affected by various flaws that may allow arbitrary code to be run.

To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Excel.

ID	Name	Product	Family	Severity
50053	MS07-043 / MS07-044: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (921503 / 940965) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
4170	Microsoft Excel Remote Code Execution Vulnerabilities (940965)	Nessus Network Monitor	Generic	medium
4169	Microsoft Excel Remote Code Execution Vulnerabilities (940965)	Nessus Network Monitor	Generic	medium
4168	Microsoft Excel Remote Code Execution Vulnerabilities (940965)	Nessus Network Monitor	Generic	medium
25882	MS07-044: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (940965)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2007-3890

high

Tenable Plugins

high

medium

medium

medium

high