PT-2009-3695 · Microsoft · Office Powerpoint

Carsten H. Eiram · Publicado 2009-05-12 · Atualizado 2018-10-12 · CVE-2009-1131

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint 2000 SP3

Description The issue is related to the handling of specially crafted PowerPoint files, which can trigger memory corruption due to a large amount of data associated with unspecified atoms. This can lead to remote code execution. An attacker could exploit this by creating a specially crafted PowerPoint file that could be included as an e-mail attachment or hosted on a specially crafted or compromised Web site.

Recommendations For Microsoft Office PowerPoint 2000 SP3, consider avoiding the use of unspecified atoms in PowerPoint files until a patch is available. As a temporary workaround, restrict access to specially crafted PowerPoint files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-1131

Produtos afetados

Office Powerpoint

Referências · 13

• http://securityfocus.com/bid/34841 · Nota
• http://securityfocus.com/archive/1/503451 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5351 · Nota
• http://secunia.com/advisories/32428 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1131 · Nota de Segurança
• http://osvdb.org/54393 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1131 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA09-132A.html · Nota
• http://secunia.com/secunia_research/2008-46 · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-017 · Nota
• http://securitytracker.com/id?1022205 · Nota
• http://vupen.com/english/advisories/2009/1290 · Aviso do Fabricante