Microsoft Security Bulletin MS06-059 - Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

This critical bulletin addresses multiple vulnerabilities in all version of Excel (including Mac) and Microsoft Works Suites.  Some of the vulnerabilities are publicly detailed but Microsoft reports no knowledge of actual attacks where these vulnerabilities are exploited as of yet.  With these vulnerabilities an attacker could take control of a victim’s computer by sending the victim a malformed XLS or Lotus 123 (.123) file via email or otherwise getting the user to open such a file.  I recommend limited testing followed by immediate deployment to workstations and vulnerable Terminal Servers.

Get this valuable commentary each month as soon as Microsoft releases security updates!

Free log parser scripts, a clear explanation of Microsoft's latest security bulletin, helpful security tips, how-to's and more.