-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA06-073A
Microsoft Office and Excel Vulnerabilities
Original release date: March 14, 2006
Last revised: --
Source: US-CERT
Systems Affected
* Microsoft Office for Windows and Mac OS X
* Microsoft Excel for Windows and Mac OS X
* Microsoft Works Suite for Windows
Overview
There are critical vulnerabilities in Microsoft Office and Excel
that may allow an attacker to take control of your computer.
Solution
Apply Updates
Microsoft has provided updates to remedy these vulnerabilities. To
obtain the update, visit the Microsoft Update web site. US-CERT
also recommends enabling Automatic Updates.
Description
There are critical vulnerabilities in some features of Microsoft
Office and Excel. If an attacker can convince you to open a
malicious Office file, he or she may be able to take control of
your computer or cause it to crash. Microsoft Security Bulletins
for March 2006 provides updates that address these vulnerabilities.
For more technical information, see US-CERT Technical Cyber
Security Alert TA06-073A.
References
* US-CERT Technical Cyber Security Alert TA06-073A.html -
<http://www.us-cert.gov/cas/techalerts/TA06-073A.html>
* US-CERT Vulnerability Note VU#339878 -
<http://www.kb.cert.org/vuls/id/339878>
* US-CERT Vulnerability Note VU#104302 -
<http://www.kb.cert.org/vuls/id/104302>
* US-CERT Vulnerability Note VU#123222 -
<http://www.kb.cert.org/vuls/id/123222>
* US-CERT Vulnerability Note VU#235774 -
<http://www.kb.cert.org/vuls/id/235774>
* US-CERT Vulnerability Note VU#642428 -
<http://www.kb.cert.org/vuls/id/642428>
* US-CERT Vulnerability Note VU#682820 -
<http://www.kb.cert.org/vuls/id/682820>
* Microsoft Security Bulletin Summary for March 2006 -
<http://www.microsoft.com/technet/security/bulletin/ms06-mar.mspx>
* Microsoft Update - <https://update.microsoft.com/microsoftupdate/>
* Security Essentials -
<http://www.microsoft.com/athome/security/protect/default.aspx>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA06-073A.html>
____________________________________________________________________
Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "SA06-073A Feedback VU#339878" in the
subject.
____________________________________________________________________
For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________
Produced 2006 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
Mar 14, 2006: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBRBdLxX0pj593lg50AQKYtQgAta5xSq8AlLjOJ3qG9uqL7tKNGC0skrib
mURNLJ0cLukq47PsemQ9WaX+UePWyGApMxUECC+di+xIkQKGl/oqwbusfiukbMiR
kAlha9cIcZ8YlM1T+nZUbWRRHFH1B62mnc80KnF9s3De8kMMAIXqSeOULHT2vpB1
qMAkcrvXeFAKPbNwtFQ8uynQ/rvQ+2vFnmrRu2SgqWM0dTcKOUEYQbwfiq5NaL+/
6Eh+Ff9iMG99lTIlzfuA3Tn8RwSb3+Pdi8bOrkj4v605yiLxD3H1XS1VRqTH91Pd
F0tYk0JHBzfM+Ao+2jtLjK80i/9N4NrtSA5tvKy0Q4eeb34emXLOSA==
=An5q
-----END PGP SIGNATURE-----
