Reported October 5, 2001, by Peter Ferrie.
VERSIONS AFFECTED
- Microsoft Excel 98, 2000,
2001, 2002
- Microsoft PowerPoint 98,
2000, 2001, 2002
DESCRIPTION
A
vulnerability exists in Microsoft Excel and PowerPoint (for Windows and
Macintosh) that might let a malicious user bypass macro-checking to
automatically execute a script when opening a document.
VENDOR RESPONSE
Microsoft
released security bulletin MS01-050
to address this problem. The bulletin lists the patches and patch installation
instructions.
CREDIT
Discovered
by Peter Ferrie, Symantec Security Response.