A critical weakness found in many Microsoft programs looks like it is about to be exploited by virus writers.