PowerPoint exploit makes Windows vulnerable to cyber attacks

Sean Jeffries avatar. By: Sean Jeffries
2 minute read
powerpoint vulnerability

Home » News » PowerPoint exploit makes Windows vulnerable to cyber attacks

Attackers are often in search of vulnerabilities through which they can exploit the machine and install malware. This time around a vulnerability in the Windows Object Linking Embedding (OLE) is being exploited via the Microsoft PowerPoint by the attackers.


As per a report from security firm Trend Micro the most common type of interface that is used to exploit the vulnerability is the use of Rich Text File. All of this is done by wearing a masquerade of PowerPoint slideshows. The modus operandi is however pretty typical, an email containing an attachment is sent. Content in the email is readied in such a way that it gains the immediate attention of the recipient and also maximises the chances of a response.

Apparently, the attached document is a PPSX file which is a file format associated with the PowerPoint. This format only offers playback of the slide but the edit options are locked out. In case the file is opened it will just display the following text, ‘CVE-2017-8570. (Another vulnerability for Microsoft Office.)’.

In reality, opening the file will trigger an exploit for another vulnerability named CVE-2017-0199 and then it will offload the malicious code via the PowerPoint animations. Eventually, a file called logo.doc will be downloaded. The document is made up of an XML file with JavaScript code which is used to run a PowerShell command and download the malicious program called ‘RATMAN.exe.’ which is a remote access Trojan referred to as .

The Trojan can record keystrokes, capture screenshots, record videos and also download other malware. In essence, the attacker will be in full control of your computer and can literally cause severe damage by stealing all your information including banking passwords. The use of PowerPoint file is a clever touch since the anti virus engine will be searching for RTF file.

All said and done, Microsoft has already patched the vulnerability way back in April and this is one of the reasons why we suggest folks to keep their PC’s updated. Yet another quintessential tip is to avoid downloading attachments from unknown sources, just don’t do it.



Next up

This is what you can do if Windows cannot find javaw.exe

Matthew Adams By: Matthew Adams
3 minute read

Javaw.exe is a process that launches Java programs. However, a “Windows cannot find javaw.exe” error message can pop up for some users when they try […]

Continue Reading

Here’s how to disable Outlook Focused Inbox

Madeleine Dean By: Madeleine Dean
2 minute read

Outlook‘s Focused Inbox helps you focus on the emails that matter most to you. This feature divides your inbox into two tabs—Focused and Other. Your most […]

Continue Reading

What can I do if my laptop mousepad is not working?

Elsie Otachi By: Elsie Otachi
4 minute read

10 quick solutions to fix laptop mousepad issues Update mousepad or touchpad drivers Uninstall and reinstall mouse drivers Use Windows generic mousepad driver Run an […]

Continue Reading