Eyas of XFOCUS Security Team discovered a buffer overflow vulnerability when Excel processes a malicious “.xls” file, which might cause Excel to crash or even execute arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44694/xfocus-SD-060314.txt
Source: https://packetstormsecurity.com/files/44694/xfocus-SD-060314.txt.html