Excel Services Application non-null access violation - Event 7927 (SharePoint Server 2010)

 

Applies to: SharePoint Server 2010 Enterprise

Alert Name:   Excel Services Application non-null access violation

Event ID:   7927

Summary:   The server for Excel Services Application is responsible for loading, refreshing, and recalculating workbooks, and maintaining user session state. A workbook that was loaded on Excel Services Application caused an access violation that was not null. These access violations are potential security concerns as they might cause the server to read data to which a user does not have access or might cause the server to execute malicious code.

Symptoms:   One or more of the following symptoms might appear:

  • A user might lose an existing workbook session. This causes a user’s view of the workbook in the browser to stop responding or causes an error message to appear; for example, an error has occurred.

  • This event appears in the event log: Event ID: 7927 Description: Excel Calculation Server process tried to access a virtual address for which it does not have access to. Access Type: <type of access>, Workbook Url: <URL of workbook>, Site Id: <ID of site>. [Session: <session ID> User: <username> ]

Cause:   A workbook with malformed input was loaded on the server.