iDefense Security Advisory 12.09.08 – Remote exploitation of a memory corruption vulnerability in Microsoft Corp.’s Excel spreadsheet could allow attackers to execute arbitrary code with the privileges of the current user. This issue exists in the handling of certain malformed object records within an Excel spreadsheet (XLS), allowing memory corruption to occur. This could lead to an exploitable situation. iDefense has confirmed the existence of this vulnerability with Office 2000 SP3 fully patched as of July 2008.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72861/12.09.08-3.txt
Source: https://packetstormsecurity.com/files/72861/iDEFENSE-Security-Advisory-2008-12-09.3.html