PT-2009-2900 · Microsoft · Office Powerpoint

Publicado 2009-05-12 · Atualizado 2018-10-12 · CVE-2009-0225

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint 2002 SP3 Microsoft Office PowerPoint (affected versions not specified)

Description A remote code execution issue exists in the way Microsoft Office PowerPoint handles specially crafted files, potentially leading to memory corruption due to improper array indexing. This could be exploited by an attacker creating a specially crafted PowerPoint file, which could be distributed as an email attachment or hosted on a compromised website.

Recommendations For Microsoft Office PowerPoint 2002 SP3, consider applying security patches or updates to resolve the issue. For other affected versions of Microsoft Office PowerPoint, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-0225

Produtos afetados

Office Powerpoint

Referências · 12

• http://vupen.com/exploits/Microsoft_PowerPoint_Array_Indexing_Code_Execution_Exploit_MS09_017_1290125.php · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0225 · Nota de Segurança
• http://secunia.com/advisories/32428 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 · Aviso do Fabricante
• http://osvdb.org/54388 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5526 · Nota
• http://us-cert.gov/cas/techalerts/TA09-132A.html · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-017 · Nota
• http://securityfocus.com/bid/34880 · Nota
• http://securitytracker.com/id?1022205 · Nota
• http://vupen.com/english/advisories/2009/1290 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0225 · Nota de Segurança