Code execution via heap buffer overflow

Heap-based buffer overflow in Microsoft Excel allows local users to execute code after a victim opens a crafted workbook. Microsoft identifies the affected component only as Office Excel and has not disclosed the parser, function, or unchecked length operation that overruns heap storage. Exploitation requires user interaction and local execution context; successful exploitation runs attacker-controlled code with the affected user's privileges.