Thursday

Excel zero-day patch not included in next Reboot Tuesday



On the 24th of February, Microsoft released a security advisory for Excel (CVE-2009-0238):
http://www.microsoft.com/technet/security/advisory/968272.mspx

Quoting my previous post:

Both McAfee and Symantec reported a Trojan attacking this vulnerability. According to McAfee, current attacks are very targeted and limited. When successful, it installs a backdoor that attempts to connect a remote site port 80 and waits for commands.
Today, the patches for March were announced but they did not include Excel. Although not being exploited widespread, I still would be cautious against targeted attacks.

Related posts:
(Photo under creative commons from oskay's photostream)

0 comments: