Microsoft plans to patch PowerPoint flaw

The PowerPoint flaw could allow an attacker to remotely install malware

Microsoft is preparing to issue a patch for a security vulnerability that has plagued users since early last month.

The vulnerability lies in a component of PowerPoint and, when exploited, can allow an attacker to remotely install malware on the targeted system.

The flaw is rated as 'critical' for Office 2000 and 'important' for Office XP, 2003 and 2007, as well as the PowerPoint viewer and the Office Compatibility pack.

Microsoft first gave word of the flaw in early April when it issued a warning that the vulnerability was being actively targeted in the wild by malware writers.

Many had expected the flaw to be fixed in last month's Patch Tuesday release. When the update was released without a patch, some experts began to worry that leaving the flaw unpatched was putting users at a high risk of infection.

According to Microsoft's advance notice, the PowerPoint flaw is set to be the only patch released this month, sparing users and administrators from having to update Windows or Internet Explorer.

The May update is expected to be released on 12 May. Updates typically arrive by early afternoon US Pacific time.