PT-2009-2896 · Microsoft · Office Powerpoint

Sean Larsson · Published 2009-05-12 · Updated 2018-10-12 · CVE-2009-0221

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint versions 2002 SP3 through 2003 SP3

Description The issue is related to an integer overflow that allows remote attackers to execute arbitrary code via a crafted PowerPoint file. This file can contain a record type for collaboration information for different slides with a field specifying a large number of records, triggering an under-allocated buffer and a heap-based buffer overflow. A remote code execution vulnerability exists in the way Microsoft Office PowerPoint handles specially crafted PowerPoint files, which could be exploited by an attacker creating such a file to be included as an email attachment or hosted on a specially crafted or compromised website.

Recommendations For Microsoft Office PowerPoint versions 2002 SP3 and 2003 SP3, update to a version that includes a fix for the integer overflow issue to prevent exploitation. As a temporary workaround, consider avoiding the use of collaboration information for different slides in PowerPoint files until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2009-0221

Affected Products

Office Powerpoint

References · 12

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0221 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-0221 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 · Vendor Advisory
• http://securityfocus.com/bid/34835 · Note
• http://osvdb.org/54394 · Note
• http://secunia.com/advisories/32428 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=796 · Note
• http://us-cert.gov/cas/techalerts/TA09-132A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-017 · Note
• http://securitytracker.com/id?1022205 · Note
• http://vupen.com/english/advisories/2009/1290 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6127 · Note