Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments which lead to modification of \critical data offsets\ during the rebuilding process.