CVE:CVE-2008-3471
CNNVD:CNNVD-200810-248
Excel是微软Office办公套件中的电子表格工具。
Excel在解析BIFF文件格式时使用文件中记录的内容计算拷贝用户提供数据的栈缓冲区的大小，远程攻击者在记录中设置了特制的记录值，可能触发栈溢出，导致执行任意指令。
solution:Upgrade microsoft excel to a higher version than 2003:sp2,2003:sp3,2007,2007:sp1,and avoid the version 2003:sp2,2003:sp3,2007,2007:sp1; Upgrade microsoft excel_viewer to a higher version than -,2003,2003:sp3,and avoid the version 2003,2003:sp3; Upgrade microsoft office to a higher version than 2004,2008,and avoid the version 2004,2008; Upgrade microsoft office_compatibility_pack to a higher version than 2007,2007:sp1,and avoid the version 2007,2007:sp1; Upgrade microsoft open_xml_file_format_converter to a higher version than -