Microsoft Excel Heap Buffer Overflow Vulnerability (MS11-021) and repair solution

Affected Versions:
Microsoft Excel
Microsoft Office

Vulnerability description:

Microsoft Excel is a trial table software written and run by Microsoft for Windows and Apple Macintosh operating systems.

Microsoft Excel has a heap buffer overflow vulnerability. Remote attackers can exploit this vulnerability to execute arbitrary code with the current user permission, resulting in DOS.

Microsoft Office Excel has a remote code execution vulnerability in processing special Excel files. Attackers who successfully exploit this vulnerability can have full control over the affected system. Attackers can then install programs, view, change, or delete data, or create new accounts with full user permissions. <* Reference
Asp> http://www.microsoft.com/technet/security/bulletin/MS11-021.asp
*>
SEBUG Security suggestions:
Temporary solution:

* Use the Microsoft Office file Blocking Policy to disable opening of files from Office 2003 and earlier versions of untrusted sources and locations in Excel.

* Use MOICE to open files with unknown or suspicious sources

* Do not open Office files from suspicious sources

Vendor patch:

Microsoft
---------
Microsoft has released a Security Bulletin (MS11-021) and patches for this:

MS11-021: Vulnerabilities in Microsoft Excel cocould Allow Remote Code Execution (2489279)

Link: http://www.microsoft.com/technet/security/bulletin/MS11-021.asp