Yet Another Microsoft Excel Vulnerability

While Microsoft developers are scrambling to patch a security hole in Excel, a hacker has now posted code that exploits a second vulnerability in the popular spreadsheet software.

Microsoft says that criminals are not yet using this code in attacks, but the software could be used to run unauthorised programs on a PC, according to Marc Maiffret, chief hacking officer at security software vendor eEye Digital Security.

It marks the second time in the past week that Excel users have had to worry about this type of malware. Both attacks rely on users to open maliciously encoded Excel documents, but this new attack is less critical than the first. That’s because users must take the additional step of clicking on a specially crafted hyperlink for the attack to work.

via TechWorld