Microsoft Excel SYLK Macro Execution Vulnerability

Bugtraq ID:	727
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Oct 20 1999 12:00AM
Updated:	Oct 20 1999 12:00AM
Credit:	The vulnerability was reported to Microsoft by David Young of Derby, UK.
Vulnerable:	Microsoft Office 97 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Microsoft Office 2000 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional Microsoft Excel 97 SR2 Microsoft Excel 97 SR1 Microsoft Excel 97 + Microsoft Office 97 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Microsoft Excel 2000 + Microsoft Office 2000 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:

Microsoft Excel SYLK Macro Execution Vulnerability

When a symbolic link (SYLK) file containing a macro is opened by Excel 97 or Excel 2000, the user is not warned that a macro will be executed upon opening the file (as is customary when Excel opens other spreedsheet files containing macros.) SYLK files are basic ascii files that can be read by a variety of applications, including word processors and other spreadsheet applications. SYLK files can be created using the "Save As" function in Microsoft Excel.

Microsoft Excel SYLK Macro Execution Vulnerability

see discussion.

Microsoft Excel SYLK Macro Execution Vulnerability

Solution:
Microsoft has released a patch for this vulnerability. It is available at:

- Excel 97:
http://officeupdate.microsoft.com/downloadDetails/Xl8p7pkg.htm
- Excel 2000:
http://officeupdate.microsoft.com/2000/downloadDetails/XL9p1pkg.htm

Microsoft Excel SYLK Macro Execution Vulnerability

References:

• Microsoft Security Bulletin MS99-044: Frequently Asked Questions (Microsoft)
  
• Q241901: XL2000: Macro Virus Warning Does Not Appear Opening SYLK File (Microsoft)
  
• Q241902: XL97: Macro Virus Warning Does Not Appear Opening SYLK File (Microsoft)