From Monsters and Critics.com

Tech News
Microsoft warns of new 0-Day exploit for Excel
By Steve Ragan
Feb 4, 2007, 19:48 GMT

Microsoft recently released a new Security Advisory in regards to a new 0-Day exploit that is making its way across the web. The exploit affects Microsoft Excel and is exploitable in all Office versions except 2007. It has been confirmed in Office 2000, Office XP, Office 2003, and Office 2004 for Macintosh.

In total there are now five Office exploits currently unpatched by Microsoft, with the other four all centered on Word. Whether or not these will be patched on the upcoming ‘Patch Tuesday’ on February 13, 2007 is unknown. This latest Advisory, as well as the other Office Advisories, revolves around a user opening a specially crafted Excel document which will result in the attacker gaining the same privileges as the local user.

Microsoft suggests that users avoid saving or opening unknown Excel files and attachments. They also advise users of OneCare Live to update the software, as it will detect and remove any malicious attachments. Because that is the standard advice given with the other exploits, the safest route of action is to avoid Office files from unknown sources and to keep a currently updated Malware and Virus scanner on your computer.



© Copyright 2007 by monstersandcritics.com.
This notice cannot be removed without permission.