CVE:CVE-2007-0030
CNNVD:CNNVD-200701-094
Microsoft Excel是微软Office套件中的电子表格工具。
Excel在处理一些BIFF8记录类型的列字段中范围值的时候存在堆溢出漏洞，远程攻击者可能利用此漏洞远程控制用户机器。攻击者可以创建带有无效的Column字段记录的Excel文件，则如果用户受骗打开了该文档的话就可能导致执行任意指令。
solution:Upgrade microsoft excel to a higher version than 2000,2002,2003,and avoid the version 2000,2002,2003; Upgrade microsoft office to a higher version than 2000:sp3,xp:sp3,2003:sp2,2004,v.x,and avoid the version 2000:sp3,xp:sp3,2003:sp2,2004,v.x; Upgrade microsoft excel_viewer to a higher version than 2003,and avoid the version 2003; Upgrade microsoft works to a higher version than 2004,2005,and avoid the version 2004,2005