Ryan Naraine of eWeek writes:

Virus writers are actively exploiting a security vulnerability in the Microsoft Jet Database Engine that remains unpatched more than five months after it was first reported to the software giant.

The mail-borne exploit, which camouflages itself as a Microsoft Access file, infects Windows machines through a “highly critical” flaw in the Microsoft Jet database engine - the lightweight database widely used by applications such as Microsoft Office 2000, Office 2003, Access 2000 and Access 2003.

The vulnerability - along with proof-of-concept exploits - was first reported to Microsoft in March along with a warning that it could be used by malicious hackers to take complete control of a victim’s computer.

[Continue reading Trojan Targets Unpatched Windows Flaw]