PT-2008-1775 · Microsoft · Powerpoint Viewer 2003+1

Ruben Santamarta · Published 2008-08-12 · Updated 2018-10-12 · CVE-2008-0120

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint Viewer 2003

Description The issue allows remote attackers to execute arbitrary code via a specially crafted PowerPoint file, potentially leading to memory corruption. This can be exploited by creating a malicious PowerPoint file that could be sent as an email attachment or hosted on a compromised website. If successfully exploited, an attacker could gain complete control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with limited user rights.

Recommendations For Microsoft PowerPoint Viewer 2003, consider avoiding the use of specially crafted PowerPoint files until a fix is available. As a temporary workaround, restrict access to potentially malicious files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-0120

Affected Products

Powerpoint Viewer 2003

Office Powerpoint

References · 12

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-051 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0120 · Security Note
• http://secunia.com/advisories/31453 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0120 · Security Note
• http://marc.info/?l=bugtraq&m=121915960406986&w=2 · Vendor Advisory
• http://us-cert.gov/cas/techalerts/TA08-225A.html · Note
• http://securityfocus.com/bid/30552 · Note
• http://vupen.com/english/advisories/2008/2355 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-051 · Note
• http://securitytracker.com/id?1020676 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5768 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=739 · Note