Two new vulnerabilities in MS Excel and symantec products

Posted by tech master  |  at  6:56 PM No comments

The problem

1. A vulnerability has been reported in several editions of Microsoft Excel. It can be exploited to take control of a user's system. Memory could be corrupted and arbitrary code executed.

2. Various Symantec products, including Norton Antivirus 2006, Internet security 2005 and 2006, SystemWorks 2006, and Antispyware edition 2005 have vulnerabilities that can be exploited to compromise a user's system. They are caused due to errors in certain ActiveX controls under certain conditions.



What to Do

Microsoft has released patches for various editions of Excel. Find them at
www.microsoft.com/technet/security/Bulletin/MS07-044.mspx
Symantec Security response has released Bloodhound.Exploit.148 to detect and block attempts to exploit the aforementioned vulnerability. Get fix at http://tinyurl.com/4kwu