CVE:CVE-2007-0215
CNNVD:CNNVD-200705-142
Microsoft Excel是Office套件中的电子表格工具。
Excel在解析BIFF文件格式时存在栈溢出漏洞，在处理畸形的Named Graph记录时可能未经检查便将用户提供的数据拷贝到了栈中，触发这个溢出，导致在用户系统上执行任意指令。
solution:Upgrade microsoft excel to a higher version than 2000,2002,2003,2007,and avoid the version 2000,2002,2003,2007; Upgrade microsoft excel_viewer to a higher version than 2003,and avoid the version 2003; Upgrade microsoft office to a higher version than 2000:sp3,2003:sp2,2004,2007,xp:sp3,and avoid the version 2000:sp3,2003:sp2,2004,2007,xp:sp3