fyi-Brand spanking new Excel 0-day being exploited in the wild

[Gary Keramidas]

http://blogs.zdnet.com/security/?p=2658

 

[David]

Thanks for the info.

David

 

[Peter T]

The link raises concerns and refers to a vulnerability reported by Symantec
(Norton).

I've tried to find the source of this report, in particular on the Symantec
site. Indeed the particular Trojan involved is reported by Symantec as
having been discovered yesterday, but only as a low level threat in relation
to Windows OS (as far as I can determine). I may have missed it but I cannot
find any mention of the particular Trojan involved in relation to Excel.

This appears to be the virus referred to in the blog referred to by Gary -

http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-022310-4202-99&tabid=2

The blog does mention a variation of the virus, however searching the
relevant terms with Excel does not give any hits.

I wonder if this may be a false alarm, at least as it relates to Excel. Of
course if anyone can refer "verifiable" details please follow up.

Regards,
Peter T

 

[Gary Keramidas]

Microsoft confirms 0-day in Excel, expands list of vulnerable systems
<http://blogs.zdnet.com/security/?p=2664>