New Excel Exploit

Discussion in 'Networking and Security' started by GTS, Feb 25, 2009.

  1. GTS

    GTS

    Don't open Excel attachments from people you don't know (including ET)!

    http://www.infoworld.com/article/09..._unpatched_vulnerability_in_Excel_2007_1.html

    Microsoft's Excel spreadsheet program has a zero-day vulnerability that attackers are exploiting on the Internet.

    A zero-day vulnerability is one that does not have a patch and is actively being used to attack computers when it is publicly revealed. Microsoft said Tuesday that it plans to patch the issue, but did not say when. The company's next set of security patches are set to be released March 9.

    "At this time, we are aware only of limited and targeted attacks that attempt to use this vulnerability," wrote Microsoft Spokesman Bill Sisk in a blog posting. "We are developing a security update for Microsoft Office that addresses this vulnerability."

    The vulnerability affects Microsoft Office 2007, Microsoft Office 2003, Microsoft Office 2002, and Microsoft Office 2000. It also affects the following Mac products: Microsoft Office 2008, Microsoft Office 2004, and the Mac's Open XML File Format Converter.