|
Users of Excel's immensely popular spreadsheets are increasingly having to look over their shoulder. Insiders are today reporting that a new security leak -- for the third this month -- has been discovered within the program. Excel 2000, 2002, 2003 and Office 2000, XP and 2003 are all affected, and the fallout is driving accountants into the fetal position. The most recently reported flaw allows attackers to carry out their own commands by convincing a user that a repair is needed on a specific file. Once that file is opened, hackers can do what they wish to an affected users' system. Caught off guard (perhaps unsurprisingly), Microsoft has stated that they are investigating such attacks, but were completely unaware that such threats even existed. (Source: zdnet.com) This is hardly the first security issue facing Excel users. In late June an attack code was released, creating a file that, when opened, caused Excel to crash. Much like the most recent threat, there was a chance that such a file could allow a hacker to commandeer a PC itself. The third and final Excel crack to have been discovered in the last month also provided the opportunity for an intruder to take complete control of a user system. Microsoft was unprepared for these cracks, as well, but have set up the following website to address such issues: microsoft.com) According to those familiar with the cracks, the security bypass exists because Excel cannot effectively verify user-supplied input prior to formatting it to an insufficiently sized memory buffer. Excel 2003 and XP were most vulnerable to the late June attack, but as stated, almost all versions are affected by the issue reported today. (Source: news.com) Security is certainly the buzzword around Microsoft these days, as technicians attempt to repair hacks like these and lawyers prepare to defend the Windows Genuine Advantage.
-- Related newsletter articles:
2006/07/02 Use AutoSum: MS Excel (excel)
2006/06/27 Save a Workbook: MS Excel (excel)
2006/01/26 Print Excel Key Assignments (Macros) (excel)
2006/04/25 Opening Multiple Windows: MS Excel (excel)
2006/07/13 Insert Excel Worksheet Cells: MS Word (excel)
2006/07/11 Link or Embed Excel Charts: MS Word (excel)
2006/07/12 Link Excel Data as a Table: MS Word (excel)
2006/07/04 Enter Numbers, Dates and Time: MS Excel (excel)
2006/02/15 Copy Column Widths along with Data in Excel (excel)
2004/10/20 Zone Alarm Pro: ad blocker gives Garbled HTML code? (security)
2004/09/16 XP Service Pack 2 reports No Virus Scanner installed? (security)
2004/12/07 XP SP2: FAQs from our Readers (security)
2003/10/16 Windows Security Update for October, 2003 (security)
2004/04/20 Remove / Uninstall iSearch toolbar? (security)
2004/04/06 New PC Security Tutorial (security)
2006/06/01 Microsoft Flexes its Muscle by Offering First Security Firewall (security)
2006/04/07 Do you care if you get Hacked? (security)
2003/02/05 Windows XP crashes with my NVidia GeForce MX 400 ... (microsoft)
2004/08/10 Windows XP Search function Missing? (microsoft)
2003/09/04 Windows XP Dialup Internet reports 'no connection ... (microsoft)
2006/06/16 Support for Windows XP Service Pack 1 ends October, 2006 (microsoft)
2003/09/16 SiS KHooker, DownloadWare, and Video Display Trouble? (microsoft)
2006/04/05 Rev Up your Calculator in Windows XP (microsoft)
-- Recent articles (from all channels): 2008/05/12 Today in History: for Monday, May 12, 2008
2008/05/12 [ShellX 20080512]: 'Remote Manager', and 'Cyber Bandwidth ...
2008/05/12 Video Gaming Trade Group Struggling
2008/05/12 T-Mobile Finally Joins 3G Phone Race
2008/05/12 Apple Slammed by Environment Watchdog
2008/05/09 [ShellX 20080509]: 'Advanced Run', and 'Diver Windows Manager'
2008/05/09 Texas Refuses Facebook Friend Request
2008/05/09 Photo-Enforcement Technology Replaces Officers On Patrol
2008/05/09 Cuban Government Says 'Ok Computer'
2008/05/09 Excel Can E-Mail Your Weekly Reports For You!
2008/05/08 [ShellX 20080508]: 'Shell Enhancer', and 'Lansweeper'
2008/05/08 Xobni: MS Outlook Social Networking Technology for your Inbox
2008/05/08 Music Companies Jump on GTA IV Bandwagon
2008/05/08 Fascinating: Memristor to replace Binary
2008/05/08 Adobe Hopes To Make Flash Master Of The (Mobile) Universe
2008/05/08 Spiffy Envelopes and Labels in MS Word
2008/05/07 [ShellX 20080507]: 'Winbin2iso', and 'Loop Typer'
2008/05/07 Yahoo Adds Security Warnings To Search Results
2008/05/07 Apple to Lose Money on iTunes Movie Releases
2008/05/07 Amazon.com takes New York Tax to Court
2008/05/07 Need Glasses for the Slide Sorter View in MS PowerPoint?
2008/05/07 After Winning The DVD Format War, Blu-Ray Sales Tank
2008/05/06 [ShellX 20080506]: 'Visual Basic 6.0 Portable', and 'Double-...
2008/05/06 Yahoo Outsources to Jajah
2008/05/06 New HP Circuit Could Change Technology Forever
2008/05/06 Movie Downloads To Match DVD Release Dates
2008/05/06 Microsoft Ends Yahoo Bid
2008/05/05 [ShellX 20080505]: 'Ie7 Pro', and 'Desktop Ok'
2008/05/05 The WB Network Hops Online
2008/05/05 Microsoft Slashes Price of Xbox 360 Overseas
2008/05/05 Google CEO Wants YouTube to Take More of Your Money
|
