Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Office 设计错误漏洞
Vulnerability Description
Microsoft Office XP是一款Microsoft推出的最新的办公室应用软件套件。Microsoft Office XP在spreadsheet实现上存在漏洞，可导致任意文件写入本地系统。Microsoft Office XP的spreadsheet组件可以嵌入在WEB页面和OFFICE文档中，此spreadsheet组件的HOST()函数存在漏洞，可以允许建立任意名称的文件并指定放到任意目录如用户启动目录，导致用户启动的时候可以执行建立的文件而控制系统。攻击者可以通过嵌入包含=Host().
CVSS Information
N/A
Vulnerability Type
N/A