Microsoft has released details of an as-yet unpatched flaw in DirectShow - the second in a month - which leaves both desktop and server systems vulnerable to attack.

An unpatched vulnerability in the way DirectX handles QuickTime-format media files can lead to remote code execution, according to a security alert from Microsoft.