CVE:CVE-2009-0561
CNNVD:CNNVD-200906-146
Excel是微软Office套件中的电子表格工具。
如果用户受骗打开了恶意的Excel文件，在解析文件中的畸形记录时可能触发指针破坏、数组索引错误、整数溢出、栈溢出等多个漏洞。成功利用这些漏洞的攻击者可以完全控制受影响的系统。攻击者随后可安装程序；查看、更改或删除数据；或者创建拥有完全管理权限的新帐户。
solution:Upgrade microsoft office to a higher version than 2004,2008,xp:sp3,and avoid the version 2004,2008,xp:sp3; Upgrade microsoft office_compatibility_pack_for_word_excel_ppt_2007 to a higher version than *:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft office_excel to a higher version than 2000:sp3,2003:sp3,2007:sp1,2007:sp2,and avoid the version 2000:sp3,2003:sp3,2007:sp1,2007:sp2; Upgrade microsoft office_excel_viewer to a higher version than *,2003:sp3,and avoid the version 2003:sp3; Upgrade microsoft office_sharepoint_server to a higher version than 2007:sp1,2007:sp2,and avoid the version 2007:sp1,2007:sp2; Upgrade microsoft open_xml_file_format_converter to a higher version than *