Title: Microsoft Excel SYLK Macro Execution Vulnerability
Severity: MODERATE
Description:
When a symbolic link (SYLK) file containing a macro is opened by Excel 97 or Excel 2000, the user is not warned that a macro will be executed upon opening the file (as is customary when Excel opens other spreedsheet files containing macros.) SYLK files are basic ascii files that can be read by a variety of applications, including word processors and other spreadsheet applications. SYLK files can be created using the "Save As" function in Microsoft Excel.
Affected Products:
- Microsoft Excel 2000
- Microsoft Excel 97 0.0.0
- Microsoft Excel 97 0.0.0SR1
- Microsoft Excel 97 0.0.0SR2
- Microsoft Office 2000
- Microsoft Office 97 0.0.0
References:
- Microsoft: Microsoft Security Bulletin MS99-044: Frequently Asked Questions
- Microsoft: Q241901: XL2000: Macro Virus Warning Does Not Appear Opening SYLK File
- Microsoft: Q241902: XL97: Macro Virus Warning Does Not Appear Opening SYLK File
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
