Once Microsoft Excel has been installed, we can see that it has been registered as the default application to handle sylk files (. what application is registered as the default handler for what file type). Using the lsregister command (found within /System/Library/Frameworks/amework/Versions/A/Frameworks/amework/Versions/A/Support/) via the -dump flag, we can view the associations between applications and file types (i.e. Microsoft 2019 (fully patched) for macOS:įirst, we install Microsoft Office 2019 for macOS and enable the “most” secure macro setting: “Disable all macros without notification”:.Let’s take a closer look into this, with the goal of crafting a malicious document who’s embedded macros will be automatically execute.
What is current microsoft excel for mac 2011 for mac#
“The Microsoft Office for Mac option “Disable all macros without notification” enables XLM macros without prompting, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.” Unfortunately (for macOS users), even fully-patched versions of Office (Excel) 20 on macOS remain vulnerable, as noted in a recent CERT vulnerability note VU#125336”, which states:
Mac Excel 20 prompt with “Enable Macro” alerts correctly.įair enough, as honestly nobody who cares about security should (still) be running Office 2011! “The product team has taken a look at this submission and has informed me that Excel for Mac 2011 is not supported any more, and thus is not eligible for security updates. ” In his writeup, he noted that Microsoft’s response was essential #wontfix as Office 2011 was long unsupported:
Pieter’s research (” Sylk + XLM = Code execution on Office 2011 for Mac”) highlighted a shortcoming in Office 2011, that abused a legacy macro format (XLM) in a legacy file format (sylk) to automatic execute of embedded macros. His post also links to more resources detailing this ancient file format (such as here).
0 kommentar(er)
