Board logo

标题: 微软Excel rtWnDesk Record内存崩溃 [打印本页]

作者: pioneer     时间: 2007-8-16 10:13    标题: 微软Excel rtWnDesk Record内存崩溃

来源

secunia.com

软件名

Microsoft Excel 2000

Microsoft Excel 2002

Microsoft Excel 2003

Microsoft Excel Viewer 2003

Microsoft Office 2000

Microsoft Office XP

Microsoft Office 2004 for Mac

Microsoft Office 2003 Small Business Edition

Microsoft Office 2003 Standard Edition

Microsoft Office 2003 Student and Teacher Edition

Microsoft Office 2003 Professional Edition

描述

这可被恶意用来危害用户系统。
rtWnDesk record确认索引值时的错误可通过特定的Excel Workspace (XLW)文件来使内存崩溃,崩溃成功后允许执行任意代码
其它在微软内部发现的不确定的安全问题已经报告过。

解决方案

应用补丁
Microsoft Office 2000 SP3:
http://www.microsoft.com/downloa ... F-823A-C41DDF5A7C9A   

Microsoft Office XP SP3:
http://www.microsoft.com/downloa ... F-8209-06F2C8C8A86F

Microsoft Office 2003 SP2:
http://www.microsoft.com/downloa ... 9-AAA1-A21CC9388ABE

Microsoft Excel Viewer 2003:
http://www.microsoft.com/downloa ... 7-8069-95535A78500A

Microsoft Office 2004 for Mac:
http://www.microsoft.com/mac/downloads.aspx#Office2004




欢迎光临 微点交流论坛 (http://bbs.micropoint.com.cn/) bbs.micropoint.com.cn