CVE:CVE-2007-0031
CNNVD:CNNVD-200701-101
Microsoft Excel是微软Office套件中的电子表格工具。
Excel在处理BIFF8格式电子表格文件中畸形的PALETTE记录时存在堆溢出漏洞，远程攻击者可能利用此漏洞远程控制用户机器。在Excel文档中如果攻击者为PALETTE记录指定了过多条目的话，就会触发这个漏洞，攻击者通过诱骗用户打开此恶意文档导致在用户机器上执行任意指令。
solution:Upgrade microsoft excel to a higher version than 2000,2002,2003,and avoid the version 2000,2002,2003; Upgrade microsoft office to a higher version than 2000:sp3,xp:sp3,2003:sp2,2004,v.x,and avoid the version 2000:sp3,xp:sp3,2003:sp2,2004,v.x; Upgrade microsoft excel_viewer to a higher version than 2003,and avoid the version 2003; Upgrade microsoft works to a higher version than 2004,2005,and avoid the version 2004,2005