PT-2008-1775 · Microsoft · Powerpoint Viewer 2003+1

Ruben Santamarta · Publicado 2008-08-12 · Atualizado 2018-10-12 · CVE-2008-0120

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint Viewer 2003

Description The issue allows remote attackers to execute arbitrary code via a specially crafted PowerPoint file, potentially leading to memory corruption. This can be exploited by creating a malicious PowerPoint file that could be sent as an email attachment or hosted on a compromised website. If successfully exploited, an attacker could gain complete control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with limited user rights.

Recommendations For Microsoft PowerPoint Viewer 2003, consider avoiding the use of specially crafted PowerPoint files until a fix is available. As a temporary workaround, restrict access to potentially malicious files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-0120

Produtos afetados

Powerpoint Viewer 2003

Office Powerpoint

Referências · 12

• http://us-cert.gov/cas/techalerts/TA08-225A.html · Nota
• http://securityfocus.com/bid/30552 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-051 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2355 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0120 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-051 · Nota
• http://secunia.com/advisories/31453 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0120 · Nota de Segurança
• http://securitytracker.com/id?1020676 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5768 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=739 · Nota
• http://marc.info/?l=bugtraq&m=121915960406986&w=2 · Aviso do Fabricante