Friday, June 23, 2006

Microsoft exposed to second zero-day vulnerability

According to media reports a second vulnerability in Microsoft Excel has appeared on the internet. Just last week, Microsoft released a record 12 fixes (eight of which were critical), and it is currently working to resolve a separate bug targeted at Excel.

Last week a 0-day exploit was discovered that affects Microsoft Excel. The vulnerability could allow the execution of arbitrary code on an affected computer.

The term "0-day" refers to the fact that there is currently no patch available to correct the vulnerability.

However, Microsoft published a security advisory that offers workarounds to help prevent successful exploitation.

Microsoft said that the problem affects Excel 2003, and Excel Viewer 2003, Excel 2002, Excel 2000, Excel 2004 for Mac, and Excel X for Mac. The vulnerability can be exploited when Excel enters repair mode, which is typically used to repair corrupt files.

Read the article HERE.

0 Comments:

Post a Comment

<< Home