CVE:CVE-2008-3006
CNNVD:CNNVD-200808-169
Excel是Microsoft Office办公软件套件中的电子表格工具。
多个版本的Excel(2000 SP3, 2002 SP3, 2003 SP2及SP3,2007 Gold及SP1; Office Excel Viewer 2003 Gold及SP3; Office Excel Viewer; Office Compatibility Pack 2007 Gold及SP1; Office SharePoint Server 2007 Gold及SP1; Office 2004/2008 for Mac)存在远程代码执行漏洞。
Excel在加载文件时没有正确解析Country记录，攻击者可通过特别构造的excle文件，执行任意指令。
solution:Upgrade microsoft office to a higher version than 2000:sp3,2003:sp2,2003:sp3,2007,2007:sp1,xp:sp3,2004,2008,and avoid the version 2000:sp3,2003:sp2,2003:sp3,2007,2007:sp1,xp:sp3,2004,2008; Upgrade microsoft office_compatibility_pack to a higher version than 2007,2007:sp1,and avoid the version 2007,2007:sp1; Upgrade microsoft office_excel_viewer to a higher version than 2003,2003:sp1,and avoid the version 2003,2003:sp1; Upgrade microsoft sharepoint_server to a higher version than 2007,2007:sp1,and avoid the version 2007,2007:sp1