Home › News › Industry News
Another severe Excel vulnerability discovered
Yet another warning for Microsoft Excel users, it seems that a second critical security vulnerability has been discovered in the software. While Microsoft is still busy with the first, another flaw that could result in arbitrary code execution has been revealed, including a potential system compromise that allowed remote control. While the article mentions lack of official confirmation, the alert was issued by Symantec yesterday. Secunia is listing it as highly critical, and it affects a wide range of existing installs:
The security hole exists because Excel fails to properly check user-supplied input before copying it to an insufficiently sized memory buffer, Symantec said. Excel 2003 and Excel XP are vulnerable, and other versions may also be affected, Symantec said.
Considering the millions that use Excel, the potential for widespread infection exists, though likely most users will not have to worry about it. As long as standard security practices and threat detection systems in most businesses are in place, and people aren't careless about downloading files, the risk of propagation goes down to almost nil. Still, it can't be an easy week for Microsoft.
The security hole exists because Excel fails to properly check user-supplied input before copying it to an insufficiently sized memory buffer, Symantec said. Excel 2003 and Excel XP are vulnerable, and other versions may also be affected, Symantec said.
Considering the millions that use Excel, the potential for widespread infection exists, though likely most users will not have to worry about it. As long as standard security practices and threat detection systems in most businesses are in place, and people aren't careless about downloading files, the risk of propagation goes down to almost nil. Still, it can't be an easy week for Microsoft.
Related Stories
User Comments (3)
Post a comment|
DragonMaster
on June 20, 2006 5:27 PM |
I wonder what would happen if a few dozen of persons would be paid to look for security problems in Microsoft products... |
|
canadian
on June 21, 2006 12:35 AM |
[b]Originally posted by DragonMaster:[/b][quote]I wonder what would happen if a few dozen of persons would be paid to look for security problems in Microsoft products...[/quote]People would realise, that microsoft just makes flawed products, that use all system resources, and cannot be trusted. Also, very expensive >< |
|
DragonMaster
on June 21, 2006 10:15 AM |
Swiss cheese! |
Most Popular
| Trending | Featured |
-
iOS 5.1.1 untethered jailbreak tool released, supports 4S, iPad 3
-
After five days, Facebook ranks as worst IPO flop of the decade
-
Rumor: Windows 8 RC will launch June 1, will ship with Adobe Flash
-
Diablo III becomes the fastest-selling PC game in history
-
Rumor: AMD "Piledriver" FX CPU production to begin Q3 2012
Editors' Storage Picks
Subscribe to TechSpot
Get free exclusive content, learn about new features and tech breaking news.