fkie_cve-2007-3490
Vulnerability from fkie_nvd
Published
2007-06-29 18:30
Modified
2024-11-21 00:33
Severity ?
Summary
Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls.
References
cve@mitre.orghttp://osvdb.org/38954
cve@mitre.orghttp://pstgroup.blogspot.com/2007/06/exploitmicrosoft-excel-20002003-sheet.html
cve@mitre.orghttp://www.milw0rm.com/sploits/06272007-2670.zipExploit
cve@mitre.orghttp://www.securityfocus.com/bid/24691
cve@mitre.orghttp://www.securitytracker.com/id?1018321
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/35132
cve@mitre.orghttps://www.exploit-db.com/exploits/4121
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/38954
af854a3a-2127-422b-91ae-364da2661108http://pstgroup.blogspot.com/2007/06/exploitmicrosoft-excel-20002003-sheet.html
af854a3a-2127-422b-91ae-364da2661108http://www.milw0rm.com/sploits/06272007-2670.zipExploit
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/24691
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1018321
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/35132
af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/4121
Impacted products
Vendor Product Version
microsoft excel 2003


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:excel:2003:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "A07483B7-E30C-43F3-B54B-2864BE9AD704",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly related to the sheet name, as demonstrated by 2670.xls."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en Microsoft Excel 2003 SP2 permite a atacantes remotos tener impacto desconocido mediante vectores no especificados, posiblemente relacionado con el nombre de la hoja, como ha sido demostrado por 2670.xls."
    }
  ],
  "id": "CVE-2007-3490",
  "lastModified": "2024-11-21T00:33:22.377",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-06-29T18:30:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/38954"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://pstgroup.blogspot.com/2007/06/exploitmicrosoft-excel-20002003-sheet.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.milw0rm.com/sploits/06272007-2670.zip"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/24691"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018321"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35132"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.exploit-db.com/exploits/4121"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/38954"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://pstgroup.blogspot.com/2007/06/exploitmicrosoft-excel-20002003-sheet.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.milw0rm.com/sploits/06272007-2670.zip"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/24691"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018321"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35132"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.exploit-db.com/exploits/4121"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.