CVE:CVE-2010-1248
CNNVD:CNNVD-201006-088
Microsoft Office Excel是Office套件中的电子表格工具。
Microsoft Office Excel在解析电子表格中的畸形HFPicture(recType 0x866)记录时存在缓冲区溢出漏洞，用户受骗打开了畸形的Excel文档就会导致执行任意代码。
solution:Upgrade microsoft excel to a higher version than 2002:sp3,and avoid the version 2002:sp3; Upgrade microsoft office to a higher version than 2004,and avoid the version 2004