News

Microsoft Finds Excel Security Flaw

Microsoft Corp. said hackers have found a way to use some older versions of its Excel spreadsheet program to take over control of people's computers.

Microsoft Corp. said hackers have found a way to use some older versions of its Excel spreadsheet program to take over control of people's computers.

Microsoft said late Tuesday that it is investigating reports of such attacks, but has not yet determined whether it will patch the hole, or when.

People who open a specially crafted Excel file from an e-mail attachment or visit a compromised Web site could be inviting hackers to take over their PCs for malicious purposes such as stealing passwords and other personal information, or sending out spam. Microsoft Office Excel 2003 Service Pack 2, Excel Viewer 2003, Excel 2002, Excel 2000 and Excel 2004 for Mac all contain the security hole.

The software maker said in a statement that users of these programs can protect their computers by using a tool that scans the files for bad code before opening, called Microsoft Office Isolated Conversion Environment.

The most recent versions of the spreadsheet program, Excel 2007, Excel 2007 SP 1 and Excel 2008 for Mac, are not thought to be affected, Microsoft said.

Featured

  • Microsoft Bolsters Windows IoT with NXP and SQL Server Support

    Microsoft's Internet of Things (IoT) product line is continuing to grow, with a few new developments highlighted this week.

  • Tamper Protection Now Available to Microsoft Defender ATP Subscribers

    The Microsoft Defender Advanced Threat Protection (ATP) E5 subscription plan now has an optional "tamper protection" security feature, Microsoft announced on Monday.

  • Exploring OCR, a New Way To Get Data into Excel

    Microsoft recently added a new optical character recognition feature to Excel that lets users import data from a photograph taken from a smartphone. Here's how to use it.

  • Microsoft Authenticator App To Get Real-Time Phishing Protections

    Microsoft is working on adding capabilities to its Microsoft Authenticator app to help defeat security breaches enabled by advanced attack techniques, including phishing and man-in-the-middle methods.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.