It's not a flaw in Windows but a flaw in the application :)

Hi. Any news on whether other apps that disply Power Point files are affected? Is this another reason to download Open Office?

Any software running on a PC that consumes files or communications from the outside world, even from trusted friends and colleagues, is a target. Every PC needs two forms of protection. One is the old familiar Anti-Virus/Spyware software that stops known virus, worms, Trojans, and other malware. The other tool is needed to stop the unknown or zero-day malware.

I've opined before, so..."Your Software Applications Cannot be Trusted":

http://www.securitynowblog.com/endpoint_security/computer-software-hijacked-malware-attack-steal

How many weeks ago was Excel similarly in the news?

http://www.securitynowblog.com/endpoint_security/documents-from-known-people-may-infect-pc-malware

Cheers,

Eirik

now that stating the obvious with six bullet points on an ethereal blue background causes more harm than good.

When Paris sighs the world follows.

The application being written by the same company that wrote Windoze...

Fuck off, Bill!

"Any software running on a PC that consumes files or communications from the outside world, even from trusted friends and colleagues, is a target."

You forgot one tiny little thing - you needed to start with "if you're dumb enough to be using Windows and connected to the Internet..."

Also, it would be kewl to use some more malignant stuff as the payload -low-level format of all physical media mounted does spring to mind. Those annoying lusers drowning my mail server by forwarding 100MB ppt "jokes" or "mantras" (for 10 lines of text each) desserve it.

Yes yes - another day another exploit.

Just use linux everyone etc , no viruses , etc

inherently secure...

etc

you all know the drill by now.

...that software that is almost 10 years old has a security hole in. People should stop expecting security patches in ancient products and upgrade. Software doesn't come with a lifetime warranty.

Recent exploits should make people realise that Vista + Office 2007 aren't just a new paint job and that you are actually paying for a car with a much stronger chassis.

OpenOffice still isn't up to the job. Microsoft Word 2007 is also hideous, but thankfully there's always plain text and/or latex.

P.S. What's with the ultra crap software model of OpenOffice where if one program (such as Impress) crashes, and it takes down every instance of every other OpenOffice app with it? Surely that can't be good for security either.

P.P.S. There seems to be an abundance of "presentationism" in the corporate world, where a excessive slideshow (which can only be made using clunky Impress and PowerPoint) is used when a simple PDF would suffice.

AssLicker: Hey boss, I've made a snazzy PowerPoint presentation about our sales performance!

Translation: Hey boss, I wasted hours of work time making a crappy presentation when I could have just exported my spreadsheet as a PDF!