12/9/2005

For sale: Brand new Microsoft Excel vulnerability

Filed under: — By Aviran Mordo @ 2:53 am

Over on eBay, a seller using the name “fearwall” has put up for auction “one (1) brand new vulnerability in the Microsoft Excel application.” The bidding started Wednesday evening at $0.01 and was up to $56 on Thursday afternoon with 21 bids placed.

According to the description, the vulnerability was discovered on Dec. 6 and all the details were submitted to Microsoft. The software maker indicated that it may fix the flaw in one of its upcoming patch releases, according to the eBay seller’s information.

“Since I was unable to find any use for this by-product of Microsoft developers, it is now available for you at the low starting price of $0.01 (a fair value estimation for any Microsoft product),” the seller wrote.

The vulnerability lies in the way Excel validates data when handling documents. Exploiting the flaw will compromise a user’s PC, according to the eBay post.

Source: News.com

 

Leave a Reply

You must have Javascript enabled in order to submit comments.

All fields are optional (except comment).
Some comments may be held for moderation (depends on spam filter) and not show up immediately.
Links will automatically get rel="nofollow" attribute to deter spammers.

Powered by WordPress