CVE-2007-1756: Microsoft Excel

High severity, CVSS 9.3. EPSS: 32% chance of exploitation in the next 30 days.

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allows user-assisted remote attackers to execute arbitrary code via a crafted Excel file, aka "Calculation Error Vulnerability".

Affected products

  • Microsoft Excel: version 2000 only; version 2002 only; version 2003 only; version 2007 only
  • Microsoft Excel Viewer: version 2003 only
  • Microsoft Office: version 2000 only; version 2003 only; version 2007 only; version xp only

Published 2007-07-10. Last modified 2026-06-16.