iDefense Security Advisory 08.12.08 – Remote exploitation of an invalid array indexing vulnerability in Microsoft Corp.’s Excel could allows attackers to execute arbitrary code with the privileges of the current user. This issue exists in the handling of “FORMAT” records within an Excel spreadsheet (XLS). By crafting a spreadsheet with an out-of-bounds array index, attackers are able to cause Excel to write a byte to arbitrary locations in stack memory. iDefense has confirmed the existence of this vulnerability with Office 2000 SP-3 fully patched as of March 2008. Other versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/69052/08.12.08-6.txt
Source: https://packetstormsecurity.com/files/69052/iDEFENSE-Security-Advisory-2008-08-12.6.html