Microsoft: Excel vulnerable to new attack

Microsoft: Excel vulnerable to new attack

Microsoft is warning that criminals are exploiting a new flaw in Excel

With its February security patches now two weeks away, Microsoft is warning of another critical flaw in its Office software.

This time Excel is the target. Microsoft confirmed late Friday that its spreadsheet software is vulnerable to a new attack, and said that the problem may affect other Office software as well.

The software giant is investigating reports that the flaw is being used by criminals in "very limited," attacks, according to a Microsoft security advisory.

This latest flaw affects Microsoft Office 2000, Microsoft Office XP, Microsoft Office 2003, and Microsoft Office 2004 for Mac.

Over the past year hackers have increasingly focused on Office applications as a security hole and the attacks based on these flaws are often the same: Criminals send an e-mail that appears legitimate, and trick unsuspecting users into opening a maliciously encoded document. Once the document is opened, attackers are able to install unauthorized software on the victim's system.

Microsoft may not have time to patch the Excel flaw in time for its next set of security updates, expected Feb. 13, but, no doubt, it has other Office patches in the works. Over the past few months four similarly critical flaws have been reported in Microsoft Word. None of these has yet been patched.

Follow Us

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Show Comments

Industry Events

24 May
ARN Exchange
20 May
View all events