Surprise! Excel gets a variation of the Word DDE block settings

Full Article :

Computerworld - https://www.computerworld.com/article/3247425/microsoft-windows/surprise-excel-gets-a-variation-of-the-word-dde-block-settings.html#tk.rss_all

You  may recall that Microsoft disabled automatic Dynamic Data Exchange (DDE) in Word back in December. I wrote about the problem, and its solution, in “Office as a malware delivery platform: DDE, Scriptlets, Macro obfuscation.” Microsoft stopped automatic DDE, the {DDEAUTO} field in Word, while setting up certain registry entries that can soften that decision.

This month, I was surprised to discover, Microsoft has made a roughly analogous change in Excel. Applying this month’s Excel security patches doesn’t change the DDE server launch and DDE server lookup settings. But it does give admins the ability to stifle both of the user

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: