Microsoft
The Excel flaw could allow an attacker to remotely assume control of a user's system

Microsoft updates Excel security patch

Last week's fix caused performance problems

Written by Shaun Nichols in Claifornia

After release we discovered that the security update caused a calculation error in Microsoft Excel 2003

Tim Rains Microsoft spokesman

Microsoft has issued an update for a flaw previously addressed in Excel, admitting that the patch caused errors.

The company patched the 'critical' flaw in last week's Patch Tuesday release, but the update caused Excel to encounter a new performance problem.

Microsoft acknowledged that the vulnerability could allow an attacker to remotely execute code on the target system.

The flaw lies in the way Excel files are processed and could allow an attacker to remotely assume control of a user's system, including the ability to execute malicious code.

The update was rated 'critical' for Microsoft Office 2000, and 'important' for Office XP, 2003, 2007 and the Mac versions of Office 2004 and 2008.

"The original version released on 11 March did fully protect against the security issues discussed in the bulletin," Microsoft spokesman Tim Rains said in a blog posting.

"However, after release we discovered that the security update caused a calculation error in Microsoft Excel 2003 when a Real Time Data source was used in a user-created Visual Basic for Applications solution (in other words a custom-built VBA function)."

On installing the update, users encountered a 'Real Time Data' error when attempting to use the component with Office's Visual Basic for Applications software.

Users can obtain the update through Microsoft's Automatic Update.

Further reading

Office fixes dominate Microsoft update

Patch Tuesday turns into a busy day at the Office   More...

Microsoft begins distributing Hyper-V

Feature-complete release candidate of virtualisation software released   More...

No Blu-ray for the Xbox

Downloads are the future says Microsoft   More...

Windows Vista Service Pack 1

Official Vista service pack   More...

Related articles

Windows 2000 flaw highlights slow Patch Tuesday

Vista and XP spared from most dangerous vulnerabilities   More...

Microsoft fixes 11 flaws in latest update

Five 'critical', five 'important', one 'moderate'   More...

Microsoft readies nine patches for August

One Mac, five Vista fixes in monthly release   More...

Office fixes dominate Microsoft update

Patch Tuesday turns into a busy day at the Office   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

09 May 2008

2.51 MBWiMax muddle, Google tactics and asteroid bunkum More...

08 May 2008

3.26 MBBroadband Anywhere, phone-free transport and Web 3.0 More...

07 May 2008

3.19 MBUK success, a paucity of IT women and robot wars More...

Poll

DATA ENCRYPTION

DATA ENCRYPTION

Should encryption be mandatory for all personal data held by companies and governments?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Ofcom

Ofcom outlines future wireless vision

Wi-Fi healthcare and intelligent car brakes in the pipeline   More...

HP

HP Labs opens doors to academia

Innovation Research Program invites proposals related to current research   More...

Advertisement

Asteroid

Nasa plans manned mission to asteroid

Bruce Willis thankfully not going   More...

MySpace

MySpace offers opt-in data sharing

Deals signed with Photobucket, Twitter, eBay and Yahoo   More...

Advertisement