virus logo Intrusion Prevention

MS.Excel.Workspace.Designation.Remote.Code.Execution

description-logoDescription

This indicates an attempt to exploit a remote code execution vulnerability in Microsoft Excel.
The vulnerability can be exploited via a malformed Excel file with the "denoting [of] the start of a Workspace designation". This results in memory corruption. A remote attacker can crash Microsoft Excel and may also be able to execute arbitrary code. Aka the "Workbook Memory Corruption Vulnerability".

affected-products-logoAffected Products

Microsoft Excel Viewer 2003
Microsoft Excel 2003 SP2
Microsoft Excel 2002 SP3
Microsoft Excel 2000 SP3

Impact logoImpact

System compromise: possible remote code execution.

recomended-action-logoRecommended Actions

Apply patch, available from the Web site.
http://www.microsoft.com/technet/security/Bulletin/MS07-036.mspx

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)
ID 14792
Created Jul 17, 2007
Updated Nov 03, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID CVE-2007-3030
Exploit Prediction Score 71.42%
Default Action drop
Active
Affected OS Windows
Affected App MS_Office