PowerPoint sole fix coming from Microsoft

By

Microsoft said it expects to release a single patch next week -- this one to repair a zero-day vulnerability in PowerPoint that is being leveraged in ongoing, targeted attacks.

The single fix, down from eight security bulletins released last month by the software giant, impacts a critical PowerPoint vulnerability present in Office 2000, 2003, XP and 2007, according to an advance notification.

Days before its April security update, Microsoft researchers disclosed that a number of varying exploits were attempting to take advantage of the vulnerability.

The malware ploy works by attempting to trick users into opening a malicious PowerPoint slideshow, the researchers said. If they do, a trojan is installed on their machine.

Originally, the bug wasn't believed to impact Office 2007, but in this week's notification, Microsoft said PowerPoint 2007 with Service Pack 1 and 2 are affected.

PowerPoint sole fix coming from Microsoft

See original article on scmagazineus.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Phishing attack nets enormous npm supply chain compromise

Phishing attack nets enormous npm supply chain compromise

"VoidProxy" PhishKit targets Google and Microsoft users

"VoidProxy" PhishKit targets Google and Microsoft users

Apple adds "mercenary spyware" protection to new A19 chip

Apple adds "mercenary spyware" protection to new A19 chip

First npm worm "Shai-Hulud" released in supply chain attack

First npm worm "Shai-Hulud" released in supply chain attack

Log In

  |  Forgot your password?