Microsoft Excel hit

Date: June 17, 2006
Source: PC WORLD
By: Jeremy Kirk

A new vulnerability has been found in Microsoft's Excel spreadsheet program, just a few days after the company fixed problems with several of its applications in its monthly patch distribution.

One customer reported an attack using the vulnerability, which comes from an e-mail with a malicious Excel document attached, wrote Mike Reavey, Microsoft Security Program Manager, on the company's security blog.

The blog post, which can be found here, did not give further details on what the malware does when downloaded.

Reavey noted that the e-mail application should prompt users to take care if they attempt to open the attachment. He cautioned against opening unsolicited documents, whoever they come from.

Security App Updated

Microsoft has updated its own Windows Live Safety Center, a Web-based antivirus and performance improvement service now in beta release, to detect documents attempting to exploit the vulnerability, and also shared the information with security partners, Reavey wrote.

"We've got the Office team engaged of course, and they are hard at work investigating the vulnerability," Reavey wrote.

On Tuesday, Microsoft issued 12 updates for 21 vulnerabilities, one of the company's largest patch handouts for applications including Internet Explorer, Outlook Express, Word, PowerPoint, and Windows Media Player.

Observers noted the patches affected mostly client-side applications. Of the 21 vulnerabilities, 19 could have allowed a hacker to gain remote control over a computer and possibly corrupt or steal data.
Original article

---

Add comment  Email to a Friend