Excel 97 Call security hole

The Excel Call security hole allows the "bad guys" to hid malicious programs inside of an Excel spreadsheet file. The security hole exists because the Excel "call" function can make arbitrary Windows system calls from inside of a spreadsheet without any security warnings.

The demo spreadsheet tests if your system has the security hole or not. This spreadsheet contains a call function which puts up a simple message using the Windows MessageBoxA system call. After loading this page, if a message box appears on the screen that says "Your system has the Excel CALL security hole!" than your system is vulnerable. You will want to install these two patch from Microsoft to fix the problem:

Office Document Open Confirmation Tool
Office 97 Service Release 2 (SR-2)

Excel spreadsheet
</td></tr> </table> <script> if(navigator.appName != "Microsoft Internet Explorer") { alert("This demo requires Internet Explorer"); } </script> <body> </html>