CVE:CVE-2011-1989
CNNVD:CNNVD-201109-174
Microsoft Office Excel是Office套件中的电子表格工具。
Microsoft Office Excel在解析条件表达式的特定类型时存在代码执行漏洞。远程攻击者可利用该漏洞导致内存破坏，完全控制受影响的系统，可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。
solution:Upgrade microsoft excel to a higher version than 2003:sp3,2007:sp2,2010,2010:sp1,and avoid the version 2003:sp3,2007:sp2,2010,2010:sp1; Upgrade microsoft excel_viewer to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft excel_web_app to a higher version than 2010,2010:sp1,and avoid the version 2010,2010:sp1; Upgrade microsoft office to a higher version than 2004,2007:sp2,2008,2010,2010:sp1,2011,and avoid the version 2004,2007:sp2,2008,2010,2010:sp1,2011; Upgrade microsoft office_compatibility_pack to a higher version than 2007:sp2,and avoid the version 2007:sp2; Upgrade microsoft open_xml_file_format_converter to a higher version than *; Upgrade microsoft sharepoint_server to a higher version than 2007:sp2,2010,2010:sp1,and avoid the version 2007:sp2,2010,2010:sp1