ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Prices
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


IT Jobs

Security threats Toolkit

Excel hit by security hole

Elinor Mills CNET News.com

Published: 07 Jul 2006 15:05 BST

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

A hole in Microsoft Excel has been identified that could allow attackers to take control of a computer, a security group said on Thursday — the third vulnerability affecting the popular spreadsheet program to surface in less than a month.

The flaw is due to a memory corruption error that occurs when handling or repairing a document containing overly long styles, the French Security Incident Response Team (FrSIRT) said in an advisory.

The flaw, which affects Excel 2000, 2002 and 2003 and Office 2000, XP and 2003, "could be exploited by attackers to execute arbitrary commands by convincing a user to open and repair a specially crafted Excel file," the advisory said.

A Microsoft representative said the company is investigating reports of a new vulnerability in Excel and was not aware of any attacks related to it.

The representative said in an email: "In order for this attack to be carried out, a user must first open a malicious Excel document that is sent as an email attachment or otherwise provided to them by an attacker. Opening the Excel document out of email will prompt the user to be careful about opening the attachment."

The vulnerability affects only users of Chinese, Japanese or Korean language versions of Excel, the Microsoft representative said.

Customers who believe they are affected can get more information on Microsoft's security website.

Excel hackers have been busy. On 16 June, experts warned about a hole that was exploited in at least one targeted cyber attack. About two weeks ago, an Excel hole was discovered that could crash the program after a malicious file is opened.

  • Email
  • Trackback
  • Clip Link
  • Print friendly Print with Dell

Did you find this article useful?
62 out of 154 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:






Related Jobs

Change PMO Analyst Investment Bank

Experience of financial reporting and excellent organisational Power Point and Excel skills are also required. Global Management and helping to ...

Global ERP Project Manager, East Midlands, Generous Package

Intermediate to advanced skills in MS Excel, MS Word and MS PowerPoint required. Implementation and rollout of Oracle ERP Applications -Document and ...

Head of Information

Head of Information Dudley The Dudley Group of Hospitals is a newly opened PFI acute general hospital, based in the heart of the Black Country. To be ...

Featured Talkback

What was achieved there is recognised to be of fundamental importance to both winning the war (Churchill visited to say 'thank you' to them) and the development of the computer. Maybe Bill Gates doesn't want to support this museum because it underlines where electronic computing started i.e. here, not the U.S.

By: 1000103773

Read full story:
Bletchley Park faces bleak future

Sentry Posts Blog

Mobile Security Expert: Your Camera Ph...

Mobile Security Expert: Your Camera Phone Got Hacked Author: Eric Everson, Founder MyMobiSafe.com Have you ever heard someone say “I’d like to be a fly on the wall in that room.”?... More

Post a comment

Skype - The Roach Motel

Here is an interesting article from The National Business Review, pointing out once again that you can never delete a Skype account. Never. Period. This is something I am familiar... More

Post a comment

The vPhone: Why Visa Should Go Mobile

The vPhone: Why Visa Should Go Mobile Author: Eric Everson, Founder MyMobiSafe.com With all of the success of Apple’s iPhone, there is a growing case to support a company like Visa... More

Post a comment