Security Alert -- Power Point and Excel

[Mark Jurik <mark@xxxxxxxxxxxx>]

Unauthorized macro files, potentially containing malicious code, can run without warning, successfully bypassing Microsoft's security features. Attacker could run arbitrary code with user privileges. Symantec engineers have discovered that by specifically modifying the data stream in a document file containing a macro, the Microsoft Office security settings for macros are completely bypassed in all versions of Microsoft PowerPoint and Excel products.

For details ...

http://securityresponse.symantec.com/avcenter/security/Content/2001.10.04.html

------------------

- mark