The company has received reports of attacks attempting to exploit the vulnerability via email.
In order to launch the attack, users must manually launch the malicious file.
A successful exploit could allow the attacker to access the machine with the same rights as the current user.
The flaw affects Excel 2003 Service Pack 2, Excel Viewer 2003, Excel 2002, Microsoft Office Excel 2000 and Excel 2004 for Mac.
Excel 2003 Service Pack 3, Excel 2007 and Excel 2008 for Mac are not believed to be affected by the vulnerability. The Microsoft Office Isolated Conversion Environment protects against the attack.
Microsoft said that the attacks were launched against specific targets, rather than random users.
Because the attack only grants the permissions of the current user, Microsoft said that administrators can minimise the risk by restricting user rights.
The US Computer Emergency Response Team urged users to mitigate the risk of attack by not opening suspicious email attachments.
Microsoft warns of Excel flaw
By
Shaun Nichols
on Jan 18, 2008 7:55AM
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
_(21).jpg&h=142&w=230&c=1&s=1)
Empowering Sustainability: Schneider Electric's Dedication to Powering Customer Success
.png&h=142&w=230&c=1&s=1)
How mandatory climate reporting is raising the bar for corporate leadership
Guiding customers on the uneven path to AI adoption
Beyond the box: How Crayon Is Redefining Distribution for the Next Era
MSPs with a robust data protection strategy will achieve market success
.jpg&w=100&c=1&s=0)
_(8).jpg&w=100&c=1&s=0)
