Thread Info
  • State Suggested Answer
  • +14 person also asked this people also asked this
  • Locked Locked
  • Replies 65 replies
  • Answers 2 answers
  • Subscribers 43 subscribers
  • Views 296144 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos cloud endpoint: Multiple users getting "Caller Check Exploit Prevented in Microsoft Excel" when using custom spreadsheets

Rich Billard

I need a resolution for this false positive that does not completely whitelist Excel.

This is directly relevant to the following thread:

https://community.sophos.com/intercept/f/information/82464/microsoft-power-query-for-excel---false-flagging-by-intercept-crashes-excel

This was supposed to be resolved by the end of November. 

We need a resolution now.

 



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    Has anyone considered creating a new Application Control policy, adding Microsoft Office suite and Excel as allowed applications?

    This seemed to work for me.

    It is just a stop-gap solution until a fix is issued by Sophos.

     

    Thanks,

    Kwame

  • 0 in reply to Kwame Ahenkorah

    That isn't a fix. You can't add MS Office Suite and Excel as exceptions. (Well you can, but if you do you're opening up a WHOLE bunch of vulnerabilities. ) 

     

    Just FYI there is a fix for this coming in the next few weeks. So far the devs have managed to narrow it down and keep the thumbprint the same, whereas before it would change every time making it impossible to create an exception for. Will let you know when the fix is deployed and if it works. 

     

    It's coming! 

Reply
  • 0 in reply to Kwame Ahenkorah

    That isn't a fix. You can't add MS Office Suite and Excel as exceptions. (Well you can, but if you do you're opening up a WHOLE bunch of vulnerabilities. ) 

     

    Just FYI there is a fix for this coming in the next few weeks. So far the devs have managed to narrow it down and keep the thumbprint the same, whereas before it would change every time making it impossible to create an exception for. Will let you know when the fix is deployed and if it works. 

     

    It's coming! 

Children
No Data
Unfiltered HTML