15 April 2009, 10:03

Security updates for Microsoft Office 2004 & 2008 for Mac

Microsoft has released updates for it's Office 2004 and 2008 suites for Macintosh that patch a previously reported critical vulnerability in Excel. The updates address a vulnerability that could have allowed an attacker to overwrite the contents of a computers memory by using malicious code, allowing for remote code execution. For an attack to be successful, a user must first be convinced to open a specially crafted Office file or attachment. The 11.5.4 update for Office 2004 and 12.1.7 update for Office 2008 fix the problem. Users are advised to apply the updates as soon as possible.

The 11.5.4 update for Office 2004 and the 12.1.7 update for Office 2008 are available to download directly from Microsoft, or through using the built-in updater by opening an Office application, such as Word, and selecting 'Check for Updates' in the Help menu. The MS09-009 update has already been released for Windows versions of Excel and is available through Microsoft Update (this link only supports IE5 or later).

See also: