PT-2010-1174 · Microsoft · Office Powerpoint

Alin Rad Pop · Published 2010-11-09 · Updated 2025-03-26 · CVE-2010-2572

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint versions 2002 SP3 through 2003 SP3

Description The issue is a buffer overflow in Microsoft PowerPoint, allowing remote attackers to execute arbitrary code via a crafted PowerPoint 95 document. This can give an attacker full control over the system, enabling them to install programs, view, modify, and delete data, as well as create new accounts with full user rights.

Recommendations For Microsoft PowerPoint versions 2002 SP3 and 2003 SP3, consider disabling the handling of PowerPoint 95 documents until a patch is available. As a temporary workaround, restrict access to the vulnerable component that handles PowerPoint 95 files to minimize the risk of exploitation. Avoid using the vulnerable version of Microsoft PowerPoint to open specially crafted PowerPoint 95 documents until the issue is resolved.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

BDU:2022-03588

CVE-2010-2572

Affected Products

Office Powerpoint

References · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-088 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03588 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2572 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-2572 · Security Note
• https://virusbulletin.com/uploads/pdf/conference_slides/2013/Niemela-VB2013.pdf · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• https://unit42.paloaltonetworks.com/scarlet-mimic-years-long-espionage-targets-minority-activists · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-088 · Note
• https://t.me/cvenotify/104938 · Telegram Post
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12195 · Note
• https://t.me/cvenotify/116371 · Telegram Post
• http://us-cert.gov/cas/techalerts/TA10-313A.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2572 · Note