It seems there is no end to Windows Zero-days, as recently Microsoft patched three zero-day vulnerabilities in Windows, which had been actively exploited by hackers, and now a new Zero-day vulnerability has been identified and affects all supported releases of the Windows operating system, except Windows Server 2003.
Microsoft , which use malicious Microsoft PowerPoint documents sent as email attachments.
According to a Microsoft Security Advisory published Tuesday, the flaw exists in the operating system's code that handles OLE (Object Linking and Embedding). OLE technology is most commonly used by Microsoft Office to embed data from an Excel spreadsheet, for example, into a Word document.
The vulnerability (designated CVE-2014-6352) is triggered when a user is forced to open a PowerPoint file that contains a malicious OLE object. So far, only PowerPoint files have been used by hackers to carry out attacks, but all types of Office files can also be used to carry out a similar attack.
