CVE:CVE-2018-8148
CNNVD:CNNVD-201805-272
Microsoft Excel是美国微软（Microsoft）公司的一款Office套件中的电子表格处理软件。
Microsoft Excel中存在缓冲区错误漏洞，该漏洞源于程序没有正确的处理内存中的对象。远程攻击者可通过诱使用户使用Microsoft Excel的受影响版本打开特制的文件利用该漏洞在当前用户的上下文中运行任意代码。以下版本受到影响：Microsoft Excel 2010 SP2，Microsoft Excel 2013 RT SP1，Microsoft Excel 2013 SP1，Microsoft Excel 2016，Microsoft Office 2010 SP2，Microsoft Office 2013 RT SP1，Microsoft Office 2013 SP1，Microsoft Office 2016，Microsoft Office 2016 Click-to-Run (C2R)，Microsoft Office Compatibility SP3。
solution:Upgrade microsoft excel to a higher version than 2010:sp2,2013:sp1,2016,and avoid the version 2010:sp2,2013:sp1,2016; Upgrade microsoft office to a higher version than 2010:sp2,2013:sp1,2016,and avoid the version 2010:sp2,2013:sp1,2016; Upgrade microsoft office_compatibility_pack to a higher version than -:sp3,and avoid the version -:sp3; Upgrade microsoft office_for_mac to a higher version than 2016,and avoid the version 2016