| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Report: Hole found in Excel | |
|
||
| Time: 14:07 EST/19:07 GMT | News Source: ZDNet | Posted By: Alex Harris | ||
|
A security hole in Microsoft's Excel XP spreadsheet application could allow hackers to take over a user's PC by using specially formed XML stylesheets. According to security expert Georgi Guninski, the problem occurs when a user opens an Excel spreadsheet file and chooses to view it with an XML stylesheet. If the stylesheet contains specially formed code, said Guninski in a security note on his Web site, the PC will try to run that code. "As script kiddies know, this may lead to taking full control over a user's computer," said Guninski. "Excel does not give any warning to the user--just asks whether to use the style sheet or not." However, Guninski added, by default Excel does not display spreadsheet files with the stylesheet. XML, or Extensible Markup Language, is a system for defining specialized markup languages that are used to transmit formatted data. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 313 Last | Next |
The time now is
10:35:42 AM
ET.
Any comment problems? E-mail us |
| #1 By 20 (24.243.51.87) at 5/28/2002 2:42:42 PM |
|
uh oh, a bad spot for Microsoft...
... and, of course, ZDNet is there to report it. I like how they disclaim, and therefore invalidate the whole article in the first sentence by saying, "According to..." Nevermind that this problem has yet to be verified by MS or an independent source or even accepted by MS for hotfix. Perhaps he's correct and this is, in fact a problem, but the fact that ZDNet jumps on it without properly verifying that it is a problem. They also don't properly disclaim this and say that it hasn't yet been verified. In fact, they go one step further and accept it as the Holy Word written Truth: [QUOTE] The flaw is the latest in a slew of security alerts to hit Microsoft products. Last week the company warned Windows NT and 2000 users of a new flaw in its debugger tools that could give attackers complete control of a system once they've gained basic access to that system[/QUOTE] Forgive me, ZDNet, where in this article has it been establish as fact? With whom has it been independently verified? Where is the MS security bulletin? This article is very presumptuous and illustrates how ZDNet is on a quest to batter the public image of Microsoft. Whether MS deserves it or not is irrelevant. It is incredibly immature for a supposedly respected magazine to run stories that are so obvious biased and break almost all of the fundamental rules of respectable journalism. |
| #2 By 6859 (204.71.100.215) at 5/28/2002 3:40:01 PM |
|
Guninski is a retard. He want's "responsible" releases of vulnerabilities, yet on his OWN site, he says the MS was notified less than one week ago...and immediately he releases code for the exploit. I suppose he considers 1 US business month to be adequate notice for a fix.
Good going, GG, you fudge head. Also note his typical anti-MS slant in his writing ("windoze", for instance). I've said it before, and I will say it again (and probably will in the future): GG is a media-hound, an anti-MS shill, and has attitude problems. The universe would be a better place without him. This post was edited by Cthulhu on Tuesday, May 28, 2002 at 15:42. |
| #3 By 20 (24.243.51.87) at 5/28/2002 4:44:07 PM |
|
#3: The article you posted was the Debugger exploit, not the Excel XSL exploit.
Upon checking microsoft.com and microsoft.com/security, I still see no mention of the XSL exploit. |
|
Write Comment
Return to News |
Displaying 1 through 25 of 313 Last | Next |
The time now is
10:35:42 AM
ET.
Any comment problems? E-mail us |
