eBay halts auction of Excel flaw

[Smitty]

Some people will do just about anything...

An online auction of a "brand new vulnerability" in Microsoft Excel had reached about $60 when eBay pulled the item late Thursday.

A seller using the name "fearwall" started the auction Wednesday evening at $0.01. It was up to $56 on Thursday afternoon with 21 bids placed, and eBay squashed the auction soon after that.

The online auctioneer removed the item because it contravened its guidelines, eBay spokeswoman Catherine England said Friday. "The listing was pulled for violating our policy against encouraging illegal activity," she said in an e-mailed statement.

Microsoft is aware of the reported flaw and has been working with eBay on the matter, a company representative said in a statement. "This possible vulnerability was being auctioned on eBay, but has now been removed," the representative said.

According to the description of the item on eBay, the vulnerability was discovered on Dec. 6 and all the details were submitted to Microsoft. The flaw lies in the way Excel validates data when handling documents and exploiting it will compromise a user's PC, according to the now-removed eBay post.

Microsoft is not aware of any attacks that attempt to use the reported vulnerability, the software maker said. The company will continue to investigate the issue and may provide a fix as part of its monthly patching process or issue a security advisory, the Microsoft representative said.

The eBay seller even had a special offer for Microsoft employees: a 10 percent discount. "To qualify, you MUST provide @microsoft.com e-mail address and MUST mention discount code LINUXRULZ during checkout," the now-removed post said.

Smitty

 

[whiteghost]

hmm... that raises a lot of questions
a) who would sell such a thing
b) who would be stupid enoughto part with money for something that has a shelf life of under two minutes
c)why did ebay let it get so far
D) why has ebay not passed on the potential bidders ip addy and names as they are engaing in bidding for something illegal
e) what use was the product being sold
f) where the Hell did i put my glasses {hence the bad typing}

 

[Tazguy37]

hmm... that raises a lot of questions
D) why has ebay not passed on the potential bidders ip addy and names as they are engaing in bidding for something illegal

I'm sure they have...without advertising it.

 

[HalfAce]

why has ebay not passed on the potential bidders ip addy and names as they are engaing in bidding for something illegal

I would think in cases like this it might be benificial to actually advertise the name & IP addy of these folks.

Whiteghost, (not to change the subject but) what I'd really like to know is what the hell were you doing to your cat while his picture was being taken!

 

[whiteghost]

I didn't do anything..... the cat just saw a picture of Gary Glitter

 

[Oorang]

Altough the mention code LINUXRULEZ was a particularly funny touch. I doubt they were actually trying to get away with anything, they probably just did it to be funny. And it WAS funny.