Slashdot Mirror

← Back to Stories (view on slashdot.org)

MS Office Zero-Day Under Attack

Posted by Zonk on from the you-know-they've-released-new-software-when dept.

paulBarbs writes "Microsoft is warning users to be on the lookout for suspicious Excel files that arrive unexpectedly — even if they come from a co-worker's e-mail address. In an advisory, Microsoft confirmed a new wave of limited "zero-day" attacks was underway, using a code execution flaw in its Microsoft Office desktop productivity suite. Although .xls files are currently being used to launch the spear phishing attacks, Microsoft said users of other Office applications (Word, PowerPoint, Outlook, Access, etc.) are potentially at risk."

2 of 172 comments (clear)

  1. It's not funny, why laugh? by suv4x4 · · Score: 4, Interesting

    I fail to see why posts talking about vulnerabilities in widely used software is tagged "haha". Is it really so funny?

    The zombies that will result from those attacks will send spam even to your tricked out Linux PC. You're laughing at your own expense. Have fun.

  2. Re: eComStation and OpenOffice.org by Planesdragon · · Score: 4, Interesting

    I also don't have to worry about the vendor shutting down my OS or apps remotely in the future.

    Hi. I'm a PC user, with an HP laptop, and Office 2007. Not too long ago I had Vista Beta on this thing. And you know what? I don't have to worry about the vendor shutting me down ever. You know why? Because I live in a country that follows the rule of law, and can prove in a court that I purchased these things legally.

    Part of me wishes they'd try -- it's amazing how good the upgrade from "punative damages" would be.