The company has received reports of attacks attempting to exploit the vulnerability via email.
In order to launch the attack, users must manually launch the malicious file.
A successful exploit could allow the attacker to access the machine with the same rights as the current user.
The flaw affects Excel 2003 Service Pack 2, Excel Viewer 2003, Excel 2002, Microsoft Office Excel 2000 and Excel 2004 for Mac.
Excel 2003 Service Pack 3, Excel 2007 and Excel 2008 for Mac are not believed to be affected by the vulnerability. The Microsoft Office Isolated Conversion Environment protects against the attack.
Microsoft said that the attacks were launched against specific targets, rather than random users.
Because the attack only grants the permissions of the current user, Microsoft said that administrators can minimise the risk by restricting user rights.
The US Computer Emergency Response Team urged users to mitigate the risk of attack by not opening suspicious email attachments.
Microsoft warns of Excel flaw
By
Shaun Nichols
on Jan 18, 2008 7:55AM
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Ingram Micro Ushers in the Age of Ultra
Channel can help lead customers to boosting workplace wellbeing with professional headsets
Secure, integrated platforms enable MSPs to focus bringing powerful solutions to customers
Tech For Good program gives purpose and strong business outcomes
Build cybersecurity capability with award winning Fortinet training from Ingram Micro
Sponsored Whitepapers
-1.jpg&w=100&c=1&s=0)
Stop Fraud Before It Starts: A Must-Read Guide for Safer Customer Communications
The Cybersecurity Playbook for Partners in Asia Pacific and Japan
Pulseway Essential Eight Framework
7 Best Practices For Implementing Human Risk Management
2025 State of Machine Identity Security Report
.png&w=100&c=1&s=0)
