Feeds

Hackers go after Excel

Poisoned spreadsheet peril

Remote control for virtualized desktops

Microsoft has warned that an unpatched vulnerability in older versions of Excel is being actively exploited by hackers.

The bug, which has become the subject of targeted attacks, affects older versions of Excel. Newer versions Excel 2003 SP3 and Excel 2007 are said to be immune. Details of the vulnerability beyond what packages might be affected remain sketchy at best.

Microsoft techies are investigating the flaw, which may become the topic of a future patch. In the meantime, Redmond is trying to play down concern by pointing out mitigating factors and suggesting defence. Its suggestion, however, that few hackers know about the bug rather misses the point that this hardly reduces the risk posed by targeted attacks against unpatched flaws.

"At this time, we are aware only of targeted attacks that attempt to use this vulnerability. Additionally, as the issue has not been publicly disclosed broadly, we believe the risk at this time to be limited," Microsoft's advisory explains.

Pending the availability of a fix, security clearing house US-CERT advises users of older versions of Excel to avoid opening unfamiliar or unexpected email attachments. Sys admins should review Microsoft's suggested workarounds, it adds. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
The hidden costs of self-signed SSL certificates
Exploring the true TCO for self-signed SSL certificates, including a side-by-side comparison of a self-signed architecture versus working with a third-party SSL vendor.