Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Excel 0-day FAQ updated with MS advisory information
From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Wed, 21 Jun 2006 03:26:50 +0300 (EEST)

Microsoft Excel 0-day Vulnerability FAQ document at SecuriTeam Blogs has been updated with information included to 
related Microsoft Security Advisory.
Updates included to Revision History too.

Additionally, my research say there was sample available as early as 12th June. TrendMicro TROJ_EMBED.AN write-up states 
'Initial samples received on: Jun 12, 2006':
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FEMBED%2EAN&VSect=Sn
-> see Solution section

This Trojan was known as X97M_EMBED.AN before this week's rename process on Monday.
It is possible that other vendors had a sample more than a week ago as well, but there is no related field in their malware 
description documents. When checked it appears that Trend's HQ is located in Tokyo. I have no information where their 
laboratories are located.

Link to the FAQ document:
http://blogs.securiteam.com/?p=451

- Juha-Matti
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
  • Excel 0-day FAQ updated with MS advisory information Juha-Matti Laurio (Jun 21)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]