Heads-up for users still running Windows XP : The unpatched Help Center flaw revealed last week is now out in the wild and being used to launch malware attacks against target users. This new zero-day exploit takes advantage of the vulnerability that exists in the Microsoft Windows Help Center , a default Microsoft application that allows users to access online documentation for Windows. This vulnerability could allow remote code execution if a user views a malicious website, either via their Based on the analysis of TrendLabs SM threat analyst Joseph Cepe, there are two ways in which a user can get infected as shown below.

See original here:
Microsoft Help Center Zero-Day Exploits Loose