CVE-2007-3890: Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote a...

Security readout for executives and security teams

This is an old Microsoft Excel remote code execution vulnerability. A specially crafted Excel Workspace structure can corrupt memory when opened by affected Office versions, potentially letting an attacker run code as the user. The public bundle does not show active exploitation or a CVSS score. Exposure is most likely in legacy environments that still run the listed Office or Excel versions, especially where users can open external spreadsheet or workspace content. Modern supported Office installations are not identified as affected in the provided sources. Prioritize remediation if any legacy Office versions remain in production. The business risk is code execution from malicious spreadsheet content, but urgency depends on whether these obsolete versions still exist in your estate. Mitigation focus: Apply Microsoft guidance and updates from MS07-044 where affected versions remain in use.; Retire or isolate unsupported Office 2000, XP, 2003, and Office 2004 for Mac installations.; Restrict opening untrusted Excel files on systems that cannot be updated..

Prepared

Jun 29, 2026, 04:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.