Slashdot Mirror

← Back to Stories (view on slashdot.org)

Zero-Day Excel Exploit In the Wild

Posted by kdawson on from the be-careful-out-there dept.

snydeq writes "Microsoft Excel has a zero-day vulnerability that attackers are exploiting on the Internet, according to security vendor Symantec. The problem affects Excel 2007 both without and with Service Pack 1, according to an advisory on SecurityFocus, and other versions going back to Excel 2000. The program's vulnerability can be exploited if a user opens a maliciously crafted Excel file, allowing a hacker to leave a Trojan horse on the infected system."

4 of 117 comments (clear)

  1. Random E-mails by 0prime · · Score: 5, Funny

    Well, let me just open this excel file detailing the financial agreement I will be making with Mr. Ugubu. Surely there is nothing wrong with opening attachments from untrusted sources.

    --
    I am not a *blank*, but I did stay at a Holiday Inn Express last night.
  2. Another reason I can't use OpenOffice ..... by whoever57 · · Score: 5, Funny

    With yet another incompatibility between OpenOffice and Excel, I really can't use OpenOffice.

    --
    The real "Libtards" are the Libertarians!
  3. Next up: Zero-day Notepad exploit found by kkrajewski · · Score: 5, Funny

    Reading plaintext unsafe. News at eleven.

  4. Coincidence? by chill · · Score: 5, Funny

    Once, long ago, Excel had a full flight simulator hidden in the code. Then Microsoft created the Flight Simulator team and it was one of their landmark "games".

    Fast forward many years. Microsoft closed down Flight Simulator and a few days later there is a "several year old zero-day" exploit in, of all places, Excel.

    Coincidence? I THINK NOT! Paybacks are a bitch, aren't they Mr. Ballmer?

    --
    Learning HOW to think is more important than learning WHAT to think.