March Patch Tuesday Omits Excel Fix


Recommended Posts

March patch Tuesday omits Excel fix

zero-day, nada relief By John Leyden

6th March 2009 10:21 GMT

Microsoft forthcoming patch Tuesday will bring no relief from an unpatched Excel flaw that's the target of active malware attacks.

The March edition of Black Tuesday promises three updates, one of which Redmond classifies as critical because it poses a code execution risk. The other two flaws involve spoofing risks and are assigned to the "important" category.

As usual, Microsoft's pre-release is thin on specifics - understandably it doesn't want to give hackers too many clues - but we do know all four cover Windows. All supported version of Windows, including Vista, will need patching.

An unpatched vulnerability in Excel has been the target of hacking attacks since late last month. A patch to defend against the underlying vulnerability would fall into the Office category, so we know it won't arrive next Tuesday and is therefore highly unlikely to appear until April. ®

The Register - http://www.theregister.co.uk/2009/03/06/ma...sday_pre_alert/

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...