PT-2009-2900 · Microsoft · Office Powerpoint

Published 2009-05-12 · Updated 2018-10-12 · CVE-2009-0225

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint 2002 SP3 Microsoft Office PowerPoint (affected versions not specified)

Description A remote code execution issue exists in the way Microsoft Office PowerPoint handles specially crafted files, potentially leading to memory corruption due to improper array indexing. This could be exploited by an attacker creating a specially crafted PowerPoint file, which could be distributed as an email attachment or hosted on a compromised website.

Recommendations For Microsoft Office PowerPoint 2002 SP3, consider applying security patches or updates to resolve the issue. For other affected versions of Microsoft Office PowerPoint, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-0225

Affected Products

Office Powerpoint

References · 12

• http://vupen.com/exploits/Microsoft_PowerPoint_Array_Indexing_Code_Execution_Exploit_MS09_017_1290125.php · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0225 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0225 · Security Note
• http://secunia.com/advisories/32428 · Note
• http://osvdb.org/54388 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5526 · Note
• http://us-cert.gov/cas/techalerts/TA09-132A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-017 · Note
• http://securityfocus.com/bid/34880 · Note
• http://securitytracker.com/id?1022205 · Note
• http://vupen.com/english/advisories/2009/1290 · Note