01-16-2008, 12:37 PM
Microsoft warned customers late Tuesday that a previously unknown vulnerability in its Excel spreadsheet software for Windows and Mac OS X is currently be exploited by a targeted attack.
The flaw affects older versions of Excel, including Microsoft Office Excel 2003 Service Pack 2, Microsoft Office Excel Viewer 2003, Microsoft Office Excel 2002, Microsoft Office Excel 2000, and Microsoft Excel 2004 for Mac, the software giant stated in an advisory. For the attack to be successful, the victim would have to open a specially-crafted Excel file. A successful compromise would give the attacker the same privileges on the system as the user.
Link: MS Security Advisory
Link: SecurityFocus
The flaw affects older versions of Excel, including Microsoft Office Excel 2003 Service Pack 2, Microsoft Office Excel Viewer 2003, Microsoft Office Excel 2002, Microsoft Office Excel 2000, and Microsoft Excel 2004 for Mac, the software giant stated in an advisory. For the attack to be successful, the victim would have to open a specially-crafted Excel file. A successful compromise would give the attacker the same privileges on the system as the user.
Link: MS Security Advisory
Link: SecurityFocus