Malicious Flash files with explicit java scripts can be embedded within Excel spreadsheets using a “Shockwave Flash Object” which can be made to run once the file is opened by the user.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/47739/vuln-rnd.txt
Source: https://packetstormsecurity.com/files/47739/vuln-rnd.txt.html