Code execution via heap buffer overflow

Heap-based buffer overflow in Microsoft Excel allows local users to execute code after opening a crafted workbook with user interaction. Microsoft identifies heap memory corruption but has not disclosed the affected workbook parser or the specific operation that writes beyond its allocation. Exploitation requires a user to open attacker-controlled content, and successful code runs in the user's security context with confidentiality, integrity, and availability consequences.