Microsoft to Patch Critical Flaw, Still no Excel Fix

Microsoft is currently readying another slew of fixes for Windows operating systems dating all the way back to 2000. Unfortunately, the software giant has still not yet addressed an Excel security hole that raised eyebrows over a week ago.

Although Microsoft is remaining quiet about the fixes for its upcoming patch, the company has revealed that at least one issue is considered "critical" and two more have been classified as "important."

In other words, most business and home users will want to pay attention this coming Tuesday, March 10, when more details regarding the three Security Bulletins are made public. Typically Microsoft holds a webcast the following Wednesday morning at 11am PT to go over what its patches provide. (Source: informationweek.com)

Patch Addresses Remote Execution, Spoofing

As you might expect, the vulnerability marked "critical" is related to remote code execution, a current hacker favorite that allows a hell raiser to take control of another user's system. The other two issues, those Microsoft has so far called "important," address spoofing concerns. It's unclear what kind of spoofing, or phishing threat Microsoft is planning to fix.

What we do know is that a wide range of Microsoft Windows operating systems are affected by the upcoming Security Bulletins. Users of Windows Vista, Windows XP, Windows Server 2008, Windows Server 2003, and even Windows Server 2000 will be encouraged to use the new patch. (Source: cnet.com)

Excel Hole Still Gaping

Microsoft has yet to release any word on its progress towards fixing a Microsoft Office Excel 2007 flaw. First discovered by Symantec researchers in Japan, the malware was found to embed itself in spreadsheets and used the older .XLS binary format. That made it more recognizable to potential victims, who soon found their computers hijacked when a Trojan horse unraveled itself on their systems.

Microsoft says it expects a release once the patch it's working on has been tested. Considering the number of users running Excel and the immense data stored on all those systems, it couldn't be soon enough.