Anti-malware engine triggers remote hacks after mere file scan

Microsoft has released an emergency patch for the malware scanning engine inside Windows Defender and other Windows products that allows remote attacks to be issued by sending an infected email or instant message to a user.