Excel and Powerpoint 'Holes'

Marc

Hunkered Down for the Duration
Staff member
Admin
#1
From: http://www.computerworld.com/securitytopics/security/story/0,10801,64507,00.html

The vulnerability affects Microsoft Excel 2000 and 2002 for Windows and PowerPoint 2000 and 2002 for Windows, as well as various versions of the software for the Macintosh platform, according to a Microsoft http://www.microsoft.com/technet/security/bulletin/MS01-050.mspx advisory posted Thursday.

Patches for the affected software are available immediately and should be applied as soon as possible, Microsoft said in its advisory.

The vulnerability exists in the way macros are detected in PowerPoint and Excel documents, according to the company.

Macros are basically small pieces of code in applications such as PowerPoint and Excel that automate certain tasks, such as finding and replacing text, on behalf of the user.

In the past, attackers have created malicious macros capable of deleting or changing files or moving them to different locations, and have hidden the code in PowerPoint and Excel documents.

To deal with this threat, Microsoft has for sometime included a functionality in both applications that scans for the presence of macros in all PowerPoint and Excel documents. The feature alerts users if a macro is detected, allowing the user to decide whether to permit the macro to be executed.

The vulnerability allows users to create PowerPoint and Excel documents that skirt this protection and allows macros to execute automatically without user permission, said Motoaki Yamamura, a senior development manager with Cupertino, Calif.-based Symantec Corp. security response team.

As a result, a cracker could create and send PowerPoint and Excel documents which, when opened, would cause malicious code to run in the background without the victim's knowledge.

Because users aren't alerted to the presence of a macro in such malformed documents, "They might feel secure, when in reality they are not," Yamamura said.

It would require an attacker with a good understanding of the software and how Microsoft file formats are structured to exploit the hole, Yamamura said.

The vulnerablity was first brought to Microsoft's notice about two months ago by Symantec.

News of the latest hole comes, ironically enough, one day after Microsoft rolled out a companywide program called Strategic Technology Protection Program, which is aimed at making it easier for corporations to secure their Windows environments http://www.computerworld.com/securitytopics/security/story/0,10801,64427,00.html

Related stories:

http://www.computerworld.com/securitytopics/security/story/0,10801,64226,00.html - Microsoft stands by IIS despite Gartner recommendation, Sept. 26, 2001

http://www.computerworld.com/networkingtopics/networking/story/0,10801,64157,00.html - Secure your users, Sept. 24, 2001

http://www.computerworld.com/securitytopics/security/story/0,10801,64092,00.html - Resolving Windows insecurities, Sept. 24, 2001
 
Elsmar Forum Sponsor
Thread starter Similar threads Forum Replies Date
K Can anyone share tutorial on excel and powerpoint? After Work and Weekend Discussion Topics 3
C Template for Excel Validation Reliability Analysis - Predictions, Testing and Standards 5
R Gage R&R Excel templates Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 3
S Issuing of CoC to Customer in a Word or Excel format ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
Ajit Basrur Track audit findings on Excel tracker Excel .xls Spreadsheet Templates and Tools 9
J Does anyone have an excel IATF 16949 Internal Audit checklist I could use? IATF 16949 - Automotive Quality Systems Standard 7
S Anyone Familiar with "SPC for Excel" add-in? Lean in Manufacturing and Service Industries 4
P Commercial excel templates that calculate overhead, hourly rates, fee proposal Excel .xls Spreadsheet Templates and Tools 0
I Cannot Export multiple sections from Excel to PDF without losing pagination Excel .xls Spreadsheet Templates and Tools 23
M Matching two matrices in Excel Excel .xls Spreadsheet Templates and Tools 5
J Level 3 KPI Excel Template Manufacturing and Related Processes 1
bobdoering Informational New AIAG PFMEA Process - Excel Template Attached FMEA and Control Plans 23
GreatNate Excel PPAP Tracking templates or tool wanted APQP and PPAP 1
E Part 11 Compliance, Excel living documents (i.e. document master list, equipment list, approved supplier list) Pharmaceuticals (21 CFR Part 210, 21 CFR Part 211 and related Regulations) 3
J ISO 9001:2015 Excel Gap Analysis wanted ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
B AS9110 Audit Check Sheet wanted Excel or Word Document AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 2
G Excel report with pictures Excel .xls Spreadsheet Templates and Tools 5
A Query regarding MS Excel usage Excel .xls Spreadsheet Templates and Tools 2
A Excel OOT (Out of Tolerance) Formula Excel .xls Spreadsheet Templates and Tools 3
D Asterix when pasting a column of values from Excel into Minitab (V17) Using Minitab Software 5
Y Excel Automation - Printing Word Documents from within Excel Excel .xls Spreadsheet Templates and Tools 0
S Help me build an Excel Spreadsheet for tracking training Training - Internal, External, Online and Distance Learning 14
P Template or example Excel list of ISO certificates issued to clients ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5
M Medical Device Process validation, Validation of excel spreadsheets used for process Other Medical Device and Orthopedic Related Topics 4
C Excel date format from Denmark to USA Excel .xls Spreadsheet Templates and Tools 6
G ISO 9001:2015 - Is control possible with Excel adaptable measurement sheets? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 24
N Where I can find an Excel sample/template for recording Delivery Time and Cost Excel .xls Spreadsheet Templates and Tools 2
D How do I go about creating document logs and registers with the MS Excel Excel .xls Spreadsheet Templates and Tools 2
D Microsoft Excel database to Stand-alone software Calibration and Metrology Software and Hardware 3
QSM_Rick Controlling Multi-Tab Microsoft Excel Forms Excel .xls Spreadsheet Templates and Tools 5
B Zeiss CMM Calypso output to Excel or CSV file Help Inspection, Prints (Drawings), Testing, Sampling and Related Topics 17
S used excel formula calculated the ARL's with Rule1&Rule2 for Shewhart control chart Statistical Analysis Tools, Techniques and SPC 0
N Gantt Chart / Time Tracker in Excel - Combining Tasks on the Same Line Excel .xls Spreadsheet Templates and Tools 2
M Preventive Maintenance Spreadsheet in Excel Quality Assurance and Compliance Software Tools and Solutions 2
1 KPI Dashboard Template in Excel Format wanted Excel .xls Spreadsheet Templates and Tools 9
Ajit Basrur MS Excel to study Correlation between Humidity & Differential Pressure Excel .xls Spreadsheet Templates and Tools 7
D Gage Calibration Tracking in MS Excel Calibration and Metrology Software and Hardware 9
T Where can I get a PPAP workbook in Excel .xls with links? APQP and PPAP 1
L Excel Template for Cgk Study wanted (Capability Gauges Study) Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 12
V Looking for advice on Pooled Standard Deviation between Minitab and MS Excel Statistical Analysis Tools, Techniques and SPC 1
P Recommendations on SPC Software or Excel SPC add-in(s) Quality Assurance and Compliance Software Tools and Solutions 6
T Calculating LCL, UCL, Cp, and Cpk in an Excel Spreadsheet Statistical Analysis Tools, Techniques and SPC 3
R Is there any Excel .xls Spreadsheet available for DOE with 3 factors? Six Sigma 1
kedarg6500 Excel spreadsheet for Unilateral Tolerance Study wanted Excel .xls Spreadsheet Templates and Tools 2
kedarg6500 Excel Spreadsheet for AIAG Example wanted Excel .xls Spreadsheet Templates and Tools 3
M Excel Leadtime Analysis Graphic Tool with Macros Enabled Lean in Manufacturing and Service Industries 0
A Tracking Calibration and Qualification in an MS Excel Spreadsheet Calibration and Metrology Software and Hardware 6
S Document Control Guidelines in Engineering Projects - Excel sheets with VBA coding Document Control Systems, Procedures, Forms and Templates 3
R Excel Dashboard for Health Safety and Environmental KPI's for Multiple Sites Occupational Health & Safety Management Standards 4
B Looking for a Y-Shaped / 3-way Matrix Template (Excel or Visio) Quality Assurance and Compliance Software Tools and Solutions 7

Similar threads

Top Bottom