Whats wrong with the macro protection in Excel and PowerPoint?
It is possible for a malicious user to create a specially malformed Excel or PowerPoint document that would bypass the macro protections and allow macros to execute automatically. Is it possible to create a document like this by accident? No. It is not possible to create a document that bypasses macro protection by accident. It would require very specific, detailed knowledge and such a document would have to be specifically constructed with malicious intent. What could an attacker use this vulnerability to do? This could allow an attacker to craft a malicious document with macro code that would run automatically when the user opened the document. What actions could the malicious document take? Because macros take action on behalf of the user, a macro virus that ran would be able to take actions that the user himself is able to take, including changing or deleting files, sending data to external web sites, or reformatting the hard drive. It’s important to highlight that this means that
