Microsoft has re-released an update to Microsoft Excel 2000 SR-1. This update addresses a vulnerability that could allow malicious code to run in an Excel file without warning. Under normal circumstances, you will see a warning in Excel 2000 when you open a document that contains macros. However, it is possible for a malicious user to modify the macros in such a way that a macro can run with no warning issued. This could cause damage to data or allow unauthorized retrieval of data from your computer when you visit a Web site or open an e-mail message. After you apply this update, a warning appears before an Excel file that contains macros is opened.
For more information on this issue, see the Microsoft Security Bulletin MS01-50: Malformed Excel or PowerPoint Document Can Bypass Macro Security
This update was re-released on April 25, 2002 to correct the issue discussed in the following KB article:
Q318474 XL2000: AutoFormat Method Does Not Work with Macro Modification Security Patch.
|