Microsoft set to release Excel patch

**Glaswegian** · 04-11-2009, 08:49 AM

IT departments are set for a hefty patching session next week as both Microsoft and Oracle are due to release security updates on the same day. Among Microsoft's patches will be a fix for an Excel bug that has been exploited by cybercriminals.

Windows users should expect a lot of patches: Microsoft plans to release eight updates in total: Five of them are for Windows, with a single update each for Internet Explorer, Excel and Microsoft's Internet Security and Acceleration (ISA) server.

Oracle said that next week's patches will contain 43 security fixes, including 16 patches for the company's flagship database software. There will also be 12 vulnerabilities patched in the Oracle Application Server, as well as a handful of fixes for the company's E-Business Suite, PeopleSoft and JD Edwards Suite, and for the BEA application server suite.

The Excel update is noteworthy because Microsoft's spreadsheet software has recently been leveraged in a small number of targeted attacks. By tricking users into opening a specially crafted Excel file, criminals can install their malicious software on a victim's machine, Microsoft said. The software vendor has not said for certain whether it will patch this particular Excel flaw next week, but it seems likely.

Microsoft has also warned of a similar flaw in its PowerPoint software, which is also being used in attacks, but no PowerPoint updates are currently scheduled.

http://www.techworld.com/security/ne...&NewsID=114160

**faradd** · 04-12-2009, 06:51 AM

thanks, i am glad microsoft are doing something about their security of software and operating system. Specially Vistaa

04-11-2009, 08:49 AM	#1 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,408 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Microsoft set to release Excel patch IT departments are set for a hefty patching session next week as both Microsoft and Oracle are due to release security updates on the same day. Among Microsoft's patches will be a fix for an Excel bug that has been exploited by cybercriminals. Windows users should expect a lot of patches: Microsoft plans to release eight updates in total: Five of them are for Windows, with a single update each for Internet Explorer, Excel and Microsoft's Internet Security and Acceleration (ISA) server. Oracle said that next week's patches will contain 43 security fixes, including 16 patches for the company's flagship database software. There will also be 12 vulnerabilities patched in the Oracle Application Server, as well as a handful of fixes for the company's E-Business Suite, PeopleSoft and JD Edwards Suite, and for the BEA application server suite. The Excel update is noteworthy because Microsoft's spreadsheet software has recently been leveraged in a small number of targeted attacks. By tricking users into opening a specially crafted Excel file, criminals can install their malicious software on a victim's machine, Microsoft said. The software vendor has not said for certain whether it will patch this particular Excel flaw next week, but it seems likely. Microsoft has also warned of a similar flaw in its PowerPoint software, which is also being used in attacks, but no PowerPoint updates are currently scheduled. http://www.techworld.com/security/ne...&NewsID=114160 __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

04-12-2009, 06:51 AM	#2 (permalink)
faradd TSF Enthusiast Join Date: Mar 2008 Location: United Kingdom Posts: 998 OS: windows xp service pack 2, 3.06 ghz, speed 600mhz, ram 512, nvidia 256mb graphics card	Re: Microsoft set to release Excel patch thanks, i am glad microsoft are doing something about their security of software and operating system. Specially Vistaa