Microsoft Office exploit installs malware without using an email attachment