PT-2009-3695 · Microsoft · Office Powerpoint

Carsten H. Eiram · Published 2009-05-12 · Updated 2018-10-12 · CVE-2009-1131

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint 2000 SP3

Description The issue is related to the handling of specially crafted PowerPoint files, which can trigger memory corruption due to a large amount of data associated with unspecified atoms. This can lead to remote code execution. An attacker could exploit this by creating a specially crafted PowerPoint file that could be included as an e-mail attachment or hosted on a specially crafted or compromised Web site.

Recommendations For Microsoft Office PowerPoint 2000 SP3, consider avoiding the use of unspecified atoms in PowerPoint files until a patch is available. As a temporary workaround, restrict access to specially crafted PowerPoint files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-1131

Affected Products

Office Powerpoint

References · 13

• http://secunia.com/advisories/32428 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1131 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1131 · Security Note
• http://secunia.com/secunia_research/2008-46 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1290 · Vendor Advisory
• http://securityfocus.com/bid/34841 · Note
• http://securityfocus.com/archive/1/503451 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5351 · Note
• http://osvdb.org/54393 · Note
• http://us-cert.gov/cas/techalerts/TA09-132A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-017 · Note
• http://securitytracker.com/id?1022205 · Note