News

Microsoft Finds Excel Security Flaw

Microsoft Corp. said hackers have found a way to use some older versions of its Excel spreadsheet program to take over control of people's computers.

Microsoft Corp. said hackers have found a way to use some older versions of its Excel spreadsheet program to take over control of people's computers.

Microsoft said late Tuesday that it is investigating reports of such attacks, but has not yet determined whether it will patch the hole, or when.

People who open a specially crafted Excel file from an e-mail attachment or visit a compromised Web site could be inviting hackers to take over their PCs for malicious purposes such as stealing passwords and other personal information, or sending out spam. Microsoft Office Excel 2003 Service Pack 2, Excel Viewer 2003, Excel 2002, Excel 2000 and Excel 2004 for Mac all contain the security hole.

The software maker said in a statement that users of these programs can protect their computers by using a tool that scans the files for bad code before opening, called Microsoft Office Isolated Conversion Environment.

The most recent versions of the spreadsheet program, Excel 2007, Excel 2007 SP 1 and Excel 2008 for Mac, are not thought to be affected, Microsoft said.

Featured

  • Hyper-V Architecture: Some Clarifications

    Brien answers two thought-provoking reader questions. First, do Hyper-V VMs have direct hardware access? And second, how is it possible to monitor VM resource consumption from the host operating system?

  • Old Stone Wall Graphic

    Microsoft Addressing 36 Vulnerabilities in December Security Patch Release

    Microsoft on Tuesday delivered its December bundle of security patches, which affect Windows, Internet Explorer, Office, Skype for Business, SQL Server and Visual Studio.

  • Microsoft Nudging Out Classic SharePoint Blogs

    So-called "classic" blogs used by SharePoint Online subscribers are on their way toward "retirement," according to Dec. 4 Microsoft Message Center post.

  • Datacenters in Space: OrbitsEdge Partners with HPE

    A Florida-based startup is partnering with Hewlett Packard Enterprise in a deal that gives new meaning to the "edge" in edge computing.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.