Microsoft rolled out minor updates to the 2004 and 2008 editions of its Office suite of productivity tools on Tuesday that patch a security vulnerability in the Excel spreadsheet application.
According to a Microsoft security bulletin, seven privately reported vulnerabilities in Excel could allow remote code execution if a user were to open a specially-crafted file. By exploiting those vulnerabilities, an attacker could gain the same user rights as a local user.
There’s more to the 12.2.4 update for Office 2008 than just a security patch, however. According to Microsoft’s release notes, the update also improves stability by fixing an issue that could cause Excel to close unexpectedly if corrupted fonts are present, a user inserts a row or value into a calculated column, or a user drags the scroll bar when Excel displays trendlines. In addition, the update promises to fix an issue that caused slow performance with certain printer drivers in Snow Leopard while also fixing an issue in which multiple line values in a single cell appear in separate rows when the contents are saved as a text file and then opened in Excel.
In addition to the two Office updates, Microsoft rolled out two other updates on Tuesday. Microsoft Entourage 2008 for Mac, Web Services Edition 13.0.4 now synchronizes notes, tasks, and categories with Exchange Server. The update released Tuesday—which is aimed at Office 2008, Entourage 2008, and Office 2008 Special Media Edition users—also enables logging that can be used for diagnostic purposes.