also @ TechSpot: Google warns users infected with DNSChanger malware, provides help

Another severe Excel vulnerability discovered

By

On June 20, 2006, 5:09 PM EST

Yet another warning for Microsoft Excel users, it seems that a second critical security vulnerability has been discovered in the software. While Microsoft is still busy with the first, another flaw that could result in arbitrary code execution has been revealed, including a potential system compromise that allowed remote control. While the article mentions lack of official confirmation, the alert was issued by Symantec yesterday. Secunia is listing it as highly critical, and it affects a wide range of existing installs:

The security hole exists because Excel fails to properly check user-supplied input before copying it to an insufficiently sized memory buffer, Symantec said. Excel 2003 and Excel XP are vulnerable, and other versions may also be affected, Symantec said.
Considering the millions that use Excel, the potential for widespread infection exists, though likely most users will not have to worry about it. As long as standard security practices and threat detection systems in most businesses are in place, and people aren't careless about downloading files, the risk of propagation goes down to almost nil. Still, it can't be an easy week for Microsoft.

Related Stories

No tags on this story

User Comments (3)

Post a comment
DragonMaster
on June 20, 2006
5:27 PM
I wonder what would happen if a few dozen of persons would be paid to look for security problems in Microsoft products...

Reply

canadian
on June 21, 2006
12:35 AM
[b]Originally posted by DragonMaster:[/b][quote]I wonder what would happen if a few dozen of persons would be paid to look for security problems in Microsoft products...[/quote]People would realise, that microsoft just makes flawed products, that use all system resources, and cannot be trusted. Also, very expensive ><

Reply

DragonMaster
on June 21, 2006
10:15 AM
Swiss cheese!

Reply

Browse more commented news

Post a new comment

Guest user

To post as an anonymous
user click here
.

Members

If you are a TechSpot member,
please login first.


By signing up you gain complete access to the TechSpot community. Join thousands of computer and technology enthusiasts that contribute and share knowledge in our forum. Post messages, get a private inbox, upload your own photo gallery and more.

Subscribe to TechSpot

Get free exclusive content, learn about new features and tech breaking news.