Microsoft Power Point Java Payload Code Execution
Microsoft power point allows users to insert objects of arbitrary file types, at presentation time these objects can be activated by mouse movement or clicking. If the user have JAVA (or python or similar interpreters) an attacker can insert jar file or py file into the presentation and trigger it when mouse moves, for easier exploitation the attacker can use ppsx file which will load automatically in presentation mode and once the user opens the file and moves mouse it will trigger the payload. To exploit this issue, an attacker can create a new power point presentation, insert object and choose 'create from file' and choose the jar payload, on the insert tab, click action and in both 'mouse over' and 'mouse click' tabs choose 'object action' and choose 'activate', scale the object to fit the whole slide so when the user opens the file it mouse will be over it, and just in case also if the user clicks it will open the jar file, and save the file as ppsx file.
