[注意]MS08-014：Microsoft Excel允许远程代码执行漏洞

奶油小生

<div class="date">发布日期： 三月 11, 2008</div>
<p><b>版本：</b> 1.0</p>
<div class="expandoIndent" style="MARGIN-BOTTOM: 15px"><a name="E3B"></a>
<script language="javascript">sID='2l1-E3B'</script>

<p><strong>摘要：</strong></p>
<div id="s2l1-E3B">
<p>此<a href="http://www.nohack.cn/" target="_blank">安全</a>更新解决了 Microsoft Office Excel 中多个秘密报告和公开报告的<a href="http://www.nohack.cn/bugs/" target="_blank">漏洞</a>，如果用户打开特制的 Excel 文件，这些<a href="http://www.nohack.cn/bugs/" target="_blank">漏洞</a>可能允许远程执行代码。 成功利用这些<a href="http://www.nohack.cn/bugs/" target="_blank">漏洞</a>的<a href="http://www.nohack.cn/" target="_blank">攻击</a>者可以完全控制受影响的<a href="http://www.nohack.cn/jsj/system/" target="_blank">系统</a>。 <a href="http://www.nohack.cn/" target="_blank">攻击</a>者可随后安装<a href="http://www.nohack.cn/code/" target="_blank">程序</a>；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 那些帐户被配置为拥有较少<a href="http://www.nohack.cn/jsj/system/" target="_blank">系统</a>用户权限的用户比具有管理用户权限的用户受到的影响要小。</p>
<p><b>建议。</b>&nbsp;Microsoft 建议用户立即应用此更新。</p></div>
<div id="s2l1-EXC">
<p><b>受影响的软件</b></p>
<table class="dataTable" id="ECD" cellspacing="0" cellpadding="0" border="1">
<thead>
<tr class="stdHeader" valign="top">
<td id="colEED" width="30%">Office 套件及其他软件</td>
<td id="colEID" width="19%">组件</td>
<td id="colEMD" width="19%">最大<a href="http://www.nohack.cn/" target="_blank">安全</a>影响</td>
<td id="colEQD" width="14%">综合严重等级</td>
<td id="colEUD" style="BORDER-RIGHT: #cccccc 1px="1px"  solid" width="16%">此更新替代的公告 </td></tr></thead>
<tbody>
<tr class="record" valign="top">
<td>
<p class="lastInCell">Microsoft Office 2000 Service Pack 3</p></td>
<td>
<p class="lastInCell"><a href="http://www.microsoft.com/downloads/details.%3Ca%20href='http://www.nohack.cn/code/asp/'%20target=_blank%3Easp%3C/a%3Ex?FamilyId=f7f90c30-1bfd-406b-a77f-612443e30185">Excel 2000 Service Pack 3</a><br/>(KB946979)</p></td>
<td>
<p class="lastInCell">远程执行代码</p></td>
<td>
<p class="lastInCell">严重</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell"><a href="http://www.microsoft.com/technet/security/bulletin/ms07-044.mspx">MS07-044</a></p></td></tr>
<tr class="evenRecord" valign="top">
<td>
<p class="lastInCell">Microsoft Office XP Service Pack 3</p></td>
<td>
<p class="lastInCell"><a href="http://www.microsoft.com/downloads/details.%3Ca%20href='http://www.nohack.cn/code/asp/'%20target=_blank%3Easp%3C/a%3Ex?FamilyId=907f96d5-d1e9-4471-b41c-3ac811e63038">Excel 2002 Service Pack 3</a><br/>(KB946976)</p></td>
<td>
<p class="lastInCell">远程执行代码</p></td>
<td>
<p class="lastInCell">重要</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell"><a href="http://www.microsoft.com/technet/security/bulletin/ms07-044.mspx">MS07-044</a></p></td></tr>
<tr class="record" valign="top">
<td>
<p class="lastInCell">Microsoft Office 2003 Service Pack 2</p></td>
<td>
<p class="lastInCell"><a href="http://www.microsoft.com/downloads/details.%3Ca%20href='http://www.nohack.cn/code/asp/'%20target=_blank%3Easp%3C/a%3Ex?FamilyId=296e5f2c-f594-41c8-a20a-3e4c40ae3948">Excel 2003 Service Pack 2</a><br/>(KB943985)</p></td>
<td>
<p class="lastInCell">远程执行代码</p></td>
<td>
<p class="lastInCell">重要</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell"><a href="http://www.microsoft.com/technet/security/bulletin/ms07-044.mspx">MS07-044</a></p></td></tr>
<tr class="evenRecord" valign="top">
<td>
<p class="lastInCell">2007 Microsoft Office System</p></td>
<td>
<p class="lastInCell"><a href="http://www.microsoft.com/downloads/details.%3Ca%20href='http://www.nohack.cn/code/asp/'%20target=_blank%3Easp%3C/a%3Ex?FamilyId=e7634cb5-9531-4284-9554-4168fc488e0c">Excel 2007</a><br/>(KB946974)</p></td>
<td>
<p class="lastInCell">远程执行代码</p></td>
<td>
<p class="lastInCell">重要</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell"><a href="http://www.microsoft.com/technet/security/bulletin/ms07-036.mspx">MS07-036</a></p></td></tr>
<tr class="record" valign="top">
<td>
<p class="lastInCell"><a href="http://www.microsoft.com/downloads/details.%3Ca%20href='http://www.nohack.cn/code/asp/'%20target=_blank%3Easp%3C/a%3Ex?FamilyId=280bb2ac-b21a-46b5-8751-5a50fbebf107">Microsoft Office Excel Viewer 2003</a><br/>(KB943889)</p></td>
<td>
<p class="lastInCell">&nbsp;</p></td>
<td>
<p class="lastInCell">远程执行代码</p></td>
<td>
<p class="lastInCell">重要</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell"><a href="http://www.microsoft.com/technet/security/bulletin/ms07-044.mspx">MS07-044</a></p></td></tr>
<tr class="evenRecord" valign="top">
<td>
<p class="lastInCell"><a href="http://www.microsoft.com/downloads/details.%3Ca%20href='http://www.nohack.cn/code/asp/'%20target=_blank%3Easp%3C/a%3Ex?FamilyId=e9251d71-9098-4125-ae91-7d4c83ea58ad">用于 Word、Excel 和 PowerPoint 2007 文件格式的 Microsoft Office 兼容包</a><br/>(KB947801)</p></td>
<td>
<p class="lastInCell">&nbsp;</p></td>
<td>
<p class="lastInCell">远程执行代码</p></td>
<td>
<p class="lastInCell">重要</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell"><a href="http://www.microsoft.com/technet/security/bulletin/ms07-036.mspx">MS07-036</a></p></td></tr>
<tr class="record" valign="top">
<td>
<p class="lastInCell"><a href="http://www.microsoft.com/downloads/details.%3Ca%20href='http://www.nohack.cn/code/asp/'%20target=_blank%3Easp%3C/a%3Ex?FamilyId=95DCEB37-B35F-46DB-B280-DB0F3B298AA9">Microsoft Office 2004 for Mac</a><br/>(KB949357)</p></td>
<td>
<p class="lastInCell">&nbsp;</p></td>
<td>
<p class="lastInCell">远程执行代码</p></td>
<td>
<p class="lastInCell">重要</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell"><a href="http://www.microsoft.com/technet/security/bulletin/MS08-013.mspx">MS08-013</a></p></td></tr>
<tr class="evenRecord" valign="top">
<td>
<p class="lastInCell"><a href="http://www.microsoft.com/downloads/details.%3Ca%20href='http://www.nohack.cn/code/asp/'%20target=_blank%3Easp%3C/a%3Ex?FamilyId=8FE8C32A-6D7A-482B-97C6-42562F089EE4">Microsoft Office 2008 for Mac</a><br/>(KB948057)</p></td>
<td>
<p class="lastInCell">&nbsp;</p></td>
<td>
<p class="lastInCell">远程执行代码</p></td>
<td>
<p class="lastInCell">重要</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell">无</p></td></tr></tbody></table>
<div class="dataTableBottomMargin"></div>
<p><b>不受影响的软件</b></p>
<table class="dataTable" id="ESAAC" cellspacing="0" cellpadding="0" width="46%" border="1">
<thead>
<tr class="stdHeader" valign="top">
<td id="colEVAAC" width="60%">Office 套件及其他软件</td>
<td id="colEZAAC" style="BORDER-RIGHT: #cccccc 1px="1px"  solid" width="39%">组件</td></tr></thead>
<tbody>
<tr class="record" valign="top">
<td>
<p class="lastInCell">Microsoft Office 2003 Service Pack 3</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell">Excel 2003 Service Pack 3</p></td></tr>
<tr class="evenRecord" valign="top">
<td>
<p class="lastInCell">2007 Microsoft Office System Service Pack 1</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell">Excel 2007 Service Pack 1</p></td></tr>
<tr class="record" valign="top">
<td>
<p class="lastInCell">Microsoft Works 8.0</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell">&nbsp;</p></td></tr>
<tr class="evenRecord" valign="top">
<td>
<p class="lastInCell">Microsoft Works 8.5</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell">&nbsp;</p></td></tr>
<tr class="record" valign="top">
<td>
<p class="lastInCell">Microsoft Works 9.0</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell">&nbsp;</p></td></tr>
<tr class="evenRecord" valign="top">
<td>
<p class="lastInCell">Microsoft Works Suite 2005</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell">&nbsp;</p></td></tr>
<tr class="record" valign="top">
<td>
<p class="lastInCell">Microsoft Works Suite 2006</p></td>
<td style="BORDER-RIGHT: #cccccc 1px="1px"  solid">
<p class="lastInCell">&nbsp;</p></td></tr></tbody></table></div></div>
<div>
<p><strong>微软的<a href="http://www.nohack.cn/" target="_blank">安全</a>公告: <br/></strong></p>
<p><strong><a href="http://www.microsoft.com/china/technet/security/bulletin/MS04-041.mspx"></a><a href="http://www.microsoft.com/china/technet/security/bulletin/MS08-014.mspx">http://www.microsoft.com/china/technet/security/bulletin/MS08-014.mspx</a></strong></p></div>

luqluq2003

打个补丁应该可以解决把!!!!!

輕描淡￣寫

不错不错，有闲心来搞这些……MICROSOFT的补丁下个安全工具就解决了……你复制人家官网的干啥……