iDefense Security Advisory 03.11.08 – Remote exploitation of a heap corruption vulnerability in Microsoft Corp.’s Excel spreadsheet application allows attackers to execute arbitrary code in the context of the user who started Excel. The vulnerability exists in the handling of DVAL records in BIFF8 format spreadsheet files. When certain fields are set to invalid values, heap corruption occurs. iDefense has confirmed the existence of this vulnerability in Microsoft Excel 2003 and Excel 2007. Previous versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64528/03.11.08-1.txt
Source: https://packetstormsecurity.com/files/64528/iDEFENSE-Security-Advisory-2008-03-11.1.html