from SANS - Internet Storm Center - Cooperative Cyber Threat Monitor And Alert System.
Reports of Excel 0-Day (NEW)
Published: 2006-06-16,Last Updated: 2006-06-16 06:02:01 UTC by Scott Fendley (Version: 1)
Microsoft has received a report of a new 0-day vulnerability involving Excel. They are currently investigating this issue and will issue more information on workarounds as it becomes available. They are currently blogging about it at http://blogs.technet.com/msrc/archive/2006/06/16/436174.aspx so check that site for more information as it becomes available.In the meantime, we continue to recommend the same defenses we recommended with the Word 0-day from last month located at http://isc.sans.org/diary.php?storyid=1347. These very general best practices should help alleviate the danger until Microsoft releases a patch or more specific workarounds.