Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

OS X 10.4.11 may crash or run code via Excel

CVE-2007-5861 · published 18 years ago
Summary

The Spotlight feature in OS X 10.4.11 can be tricked by a specially crafted Excel (.XLS) file, causing the application to stop working or allowing malicious code to run. This happens because the file triggers a memory error in the Microsoft Office Spotlight Importer. Apply any available system updates and avoid opening Excel files from untrusted sources; you can also disable Spotlight's Office import if it is not needed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple mac_os_x 10.4.11
cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted .XLS f...
Unspecified vulnerability in Spotlight in Apple Mac OS X 10.4.11 allows user-assisted attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted .XLS file that triggers memory corruption in the Microsoft Office Spotlight Importer.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.8 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published19 Dec 2007
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-5861 · NVD
Track software like this
Free during beta