Microsoft: No patch Tuesday for Excel security hole

Microsoft has announced that the patch tuesday will release three
updates, including one with the stamp 'critical'. A patch for a
dangerous vulnerability in Excel, however, even though the bug is
already actively exploited.

The bug in the xls file format, which appears in all versions of
Excel, according to several security companies now actively exploited
by malicious. Using an Excel file can be manipulated a PC is infected
with malware. Although a Microsoft security advisory on the issue is
delivered, the next patch will not fix include round. Furthermore, the
software giant to them that only a limited number of attack attempts
using the exploit is known. Until there is an update rate would Excel
users can go to the Office Document Open Confirmation Tool or an
account with limited rights to use.

In the - deliberately kept brief - description of the next round
patch, Microsoft describes three updates for Windows 2000, XP, Vista
and Windows Server 2003 and 2008. The patch identified as critical a
problem with a computer remote attackers could take over. The two as'
important 'patches must be defined to prevent spoofing attacks.