Hacker Sells Zero-Day Excel Bug on eBay

By | December 9, 2005

A security researcher tried to sell a zero-day vulnerability in Microsoft’s Excel spreadsheet program on eBay. The auction site removed the listing on Thursday night, after the listing was bid to $60.

The unknown hacker mentioned that the vulnerability was reported to Microsoft on Tuesday earlier this week. “All the details were submitted to Microsoft, and the reply was received indicating that they may start working on it,” wrote the hacker. “It can be assumed that no patch addressing this vulnerability will be available within the next few months.”

The seller claims that the un-patched vulnerability can be exploited to compromise user’s computer.

Leave a Reply