Microsoft Excel and PowerPoint Macro Security Bypass Vulnerability

Bugtraq ID:	3402
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 04 2001 12:00AM
Updated:	Oct 04 2001 12:00AM
Credit:	This vulnerability was reported to Microsoft by Peter Ferrie.
Vulnerable:	Microsoft PowerPoint 98 for Mac - Apple Mac OS 8 8.0 - Apple Mac OS 9 9.0 Microsoft PowerPoint 2002 + Microsoft Office XP - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows 2000 Terminal Services SP1 - Microsoft Windows 2000 Terminal Services - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 Microsoft PowerPoint 2001 for Mac - Apple Mac OS X 10.1 - Apple Mac OS X 10.0 Microsoft PowerPoint 2000 + Microsoft Office 2000 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 Microsoft Excel 98 for Mac - Apple Mac OS 8 8.0 - Apple Mac OS 9 9.0 Microsoft Excel 2002 + Microsoft Office XP - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Microsoft Excel 2001 for Mac - Apple Mac OS X 10.1 - Apple Mac OS X 10.0 + Microsoft Office 2001 For Macintosh SR1 + Microsoft Office 2001 For Macintosh Microsoft Excel 2000 + Microsoft Office 2000 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Microsoft Excel and PowerPoint Macro Security Bypass Vulnerability

Excel and PowerPoint contain macro security which alerts the user that a file may contain potentially harmful macros. The user is given the option at this time whether or not to allow the macros to be executed.

A malformed Excel or PowerPoint document can potentially bypass this macro security feature, allowing macro code to be executed without the user's knowledge. The user must still imitiate the opening of the malformed document.

The macro will run with the same permissions as the current user.

Microsoft Excel and PowerPoint Macro Security Bypass Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Excel and PowerPoint Macro Security Bypass Vulnerability

Solution:
Microsoft has supplied a patch for this issue:


Microsoft PowerPoint 98 for Mac

• Microsoft office98_secupdate
  http://www.microsoft.com/mac/download/office98/pptxlmacro.asp

Microsoft Excel 2001 for Mac

• Microsoft office2001_secupdate
  http://www.microsoft.com/mac/download/office2001/pptxlmacro.asp

Microsoft PowerPoint 2002

• Microsoft ppt1001.exe
  http://download.microsoft.com/download/powerpoint2002/ppt1001/1/w98nt4 2kme/en-us/ppt1001.exe

Microsoft Excel 2002

• Microsoft exc1001.exe
  http://download.microsoft.com/download/excel2002/exc1001/1/w98nt42kme/ en-us/exc1001.exe

Microsoft Excel 2000

• Microsoft e2kmac.exe
  http://download.microsoft.com/download/excel2000/e2kmac/1/w98nt42kme/e n-us/e2kmac.exe

Microsoft Excel 98 for Mac

• Microsoft office98_secupdate
  http://www.microsoft.com/mac/download/office98/pptxlmacro.asp

Microsoft PowerPoint 2000

• Microsoft p2kmac.exe
  http://download.microsoft.com/download/powerpoint2000/p2kmac/1/w98nt42 kme/en-us/p2kmac.exe

Microsoft PowerPoint 2001 for Mac

• Microsoft office2001_secupdate
  http://www.microsoft.com/mac/download/office2001/pptxlmacro.asp

Microsoft Excel and PowerPoint Macro Security Bypass Vulnerability

References:

• Microsoft Security Bulletin MS01-050 (Microsoft)