Categorie: Vulnerability Posted: 2003-11-12 by ReCall Views: 377 Source: Click here
Current Rating: Not rated
Details
Description: A vulnerability was reported in Microsoft Excel. A remote user can create a spreadsheet containing malicious macro code that, when opened by the target user, can execute arbitrary macro commands on the target user's system.
It is reported that a remote user can create XLM macro code that will bypass the macro security model and execute the macro code. The code can take any actions acting as the target user, the report said.
Microsoft reports that Excel 2003 is not affected.
Microsoft credits Kazuyuki Housaka with reporting the vulnerability in Excel.
Impact: A remote user can execute arbitrary macro code on the target system. The macro code will execute with the privileges of the target user.
Solution: Microsoft has issued the following fixes:
