Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Office 嵌入Shockwave Flash对象 安全限制绕过漏洞
Vulnerability Description
Microsoft Excel是非常流行的电子表格办公软件。 Microsoft Excel对文件中的对象处理存在漏洞，攻击者可能利用此漏洞在用户机器上执行任意指令。 攻击可以使用Shockwave Flash Object将有Java脚本的恶意Flash文件嵌入到Excel表单中，这样如果用户打开了该文件的话便无需用户交互便自动运行该对象。
CVSS Information
N/A
Vulnerability Type
N/A