CVE:CVE-2007-1201
CNNVD:CNNVD-200803-163
Microsoft Office Web组件是COM控件集合，用于向Web发布电子表格、图表和数据库，并查看所发布的组件。
Microsoft Office Web组件在解析特制的URL时管理内存资源的方式存在漏洞，如果用户受骗访问了恶意网页的话，就可能触发内存破坏，导致执行任意指令。
solution:Upgrade microsoft biztalk_server to a higher version than 2000,2002,and avoid the version 2000,2002; Upgrade microsoft commerce_server to a higher version than 2000,and avoid the version 2000; Upgrade microsoft internet_security_and_acceleration_server to a higher version than 2000:sp2,and avoid the version 2000:sp2; Upgrade microsoft office to a higher version than 2000:sp3,xp:sp3,and avoid the version 2000:sp3,xp:sp3; Upgrade microsoft visual_studio_.net to a higher version than 2002:sp1,2003:sp1,and avoid the version 2002:sp1,2003:sp1