Microsoft warns of security leak with PowerPoint

Microsoft and security firms warn that hackers are exploiting a zero-day vulnerability in Windows using malicious PowerPoint documents.

Microsoft warns that the as-yet-unpatched flaw is present in all supported versions of Windows except Windows Server 2003 and has already been abused in "limited, targeted attacks".

Jonathan Leopando, a technical communications staffer at Trend Micro, warns: "Currently, attacks using PowerPoint files are known to exist, but all Office file types can be used to carry out this attack."

Microsoft's advisory explains: On completion of our investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through our monthly security update release process, or an out-of-cycle security update, depending on customer needs.

The next scheduled Patch Tuesday falls on 11 November.