Patch Lady – Excel KB 4011727 registry keys

Topic

New Reply

Susan here, in the latest Excel 2016/2013 security update they have added an additional registry key to better protect you from malicious macros.  Not
[See the full post at: Patch Lady – Excel KB 4011727 registry keys]

Susan Bradley Patch Lady/Prudent patcher

2 users thanked author for this post.

AlexEiffel, woody

Reply | Quote

Replies

That’s interesting. I stopped trying to get macros to work in Excel a long time ago because it automatically disables them. It’s frustrating. But apparently that wasn’t enough?

I had a question about Office and macros come to mind recently. A lot of government offices use Word documents and pdf’s by email now. Doesn’t this open them up to possible malware?

Reply | Quote

I don’t think Microsoft Office is automatically a security risk. If they block macros by default in Office, then that should provide them the needed protection from malicious macros.

An additional benefit of Microsoft Office: If you need to email a sensitive document, you can encrypt it with a password in Microsoft Office. From what I understand, it is strong encryption. As you can imagine, sometimes the government deals with sensitive information, so strong encryption is a necessary requirement.

PDF is pretty much a universal document format these days. And companies don’t have to go through Adobe for PDF functionality. I’m pretty sure that vulnerabilities in PDF would depend on who wrote the program, not on PDF itself. In other words, if someone used good, tight code in writing their program, and then thoroughly tested their program, and then keeps up with security patches, you don’t need to be very worried about PDF vulnerabilities.

Group "L" (Linux Mint)
with Windows 10 running in a remote session on my file server

1 user thanked author for this post.

abbodi86

Reply | Quote

Perhaps related to vulnerability CVE-2018-0907 | Microsoft Office Excel Security Feature Bypass.

Reply | Quote