CVE:CVE-2009-0238
CNNVD:CNNVD-200902-554
Excel是微软Office套件中的电子表格工具。
如果用户使用Excel打开了畸形的.xls文档的话，就可能会引用无效的对象，导致以当前登录用户的权限执行任意代码。目前这个漏洞正在被名为Trojan.Mdropper.AC的木马积极的利用。当木马运行时，会在系统留下以下文件：
%Temp%\rundll.exe
之后木马试图从以下位置下载更多的文件：
[http://]61.59.24.55/sb.php?id=[19个随机ASCII字符]
[http://]61.59.24.45/sb.php?id=[19个随机ASCII字符]
[http://]61.221.40.63/sb.php?id=[19个随机ASCII字符]
solution:Upgrade microsoft excel to a higher version than 2004,and avoid the version 2004; Upgrade microsoft excel_viewer to a higher version than *; Upgrade microsoft office to a higher version than 2008,and avoid the version 2008; Upgrade microsoft office_compatibility_pack to a higher version than 2007:sp1,and avoid the version 2007:sp1; Upgrade microsoft office_excel to a higher version than 2000:sp3,2002:sp3,2003:sp3,2007:sp1,and avoid the version 2000:sp3,2002:sp3,2003:sp3,2007:sp1; Upgrade microsoft office_excel_viewer to a higher version than *,2003:gold,2003:sp3,and avoid the version 2003:gold,2003:sp3