Experts at SophosLabs™, Sophos's global network of virus, spyware and spam analysis centers, have reminded computer users to be wary of opening unsolicited files as reports circulate of a newly discovered vulnerability in Microsoft PowerPoint. The unpatched flaw is believed to allow hackers to run malicious code, such as a worm, on Windows and Mac computers.
Microsoft has published details of the issue in a security advisory on its website. The vulnerability is believed to affect Microsoft PowerPoint 2000, Microsoft PowerPoint 2002, Microsoft Office PowerPoint 2003, Microsoft PowerPoint 2004 for Mac, and Microsoft PowerPoint v. X for Mac.
Even if a worm was written for mac side of office, what it bypass the the user account controls or is it blocked from running right at UAC level?