ZeroBox Vulnerability Database

描述

多个漏洞已经确定在Microsoft Office Excel ，可以利用黑客损害有弱点的系统。这些问题所造成的指针覆写，内存腐败，数组的索引，和栈和整数溢出错误剖析Excel电子表格文件格式，可以利用攻击者执行任意代码通过诱骗用户打开一个特别设计的XLS文件。

受影响的产品

Microsoft Office Excel 2000 Service Pack 3
Microsoft Office Excel 2002 Service Pack 3
Microsoft Office Excel 2003 Service Pack 3
Microsoft Office Excel 2007 Service Pack 1
Microsoft Office Excel 2007 Service Pack 2

Microsoft Office 2000 Service Pack 3
Microsoft Office XP Service Pack 3
Microsoft Office 2003 Service Pack 3
2007 Microsoft Office System Service Pack 1
2007 Microsoft Office System Service Pack 2
Microsoft Office 2004 for Mac
Microsoft Office 2008 for Mac
Open XML File Format Converter for Mac
Microsoft Office Excel Viewer 2003 Service Pack 3
Microsoft Office Excel Viewer
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 1
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2
Microsoft Office SharePoint Server 2007 Service Pack 1 (32-bit)
Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit)
Microsoft Office SharePoint Server 2007 Service Pack 1 (64-bit)
Microsoft Office SharePoint Server 2007 Service Pack 2 (64-bit)

解决方案

适用于修补程序：
http://www.microsoft.com/technet/security/bulletin/ms09-021.mspx