PT-2011-2533 · Microsoft · Office For Mac+5

Published 2011-04-12 · Updated 2018-10-12 · CVE-2011-0655

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint versions 2007 SP2 and 2010 Office for Mac versions 2004, 2008, and 2011 Open XML File Format Converter for Mac Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 PowerPoint Viewer PowerPoint Viewer 2007 SP2 PowerPoint Web App

Description The issue arises from improper validation of TimeColorBehaviorContainer Floating Point records in PowerPoint documents, allowing remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted document containing an invalid record. A remote code execution vulnerability exists in the way that Microsoft PowerPoint handles specially crafted PowerPoint files. An attacker could exploit the vulnerability by creating a specially crafted PowerPoint file that could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site.

Recommendations For Microsoft PowerPoint 2007 SP2, update to a fixed version to resolve the issue. For Microsoft PowerPoint 2010, update to a fixed version to resolve the issue. For Office for Mac versions 2004, 2008, and 2011, update to a fixed version to resolve the issue. For Open XML File Format Converter for Mac, update to a fixed version to resolve the issue. For Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2, update to a fixed version to resolve the issue. For PowerPoint Viewer, update to a fixed version to resolve the issue. For PowerPoint Viewer 2007 SP2, update to a fixed version to resolve the issue. For PowerPoint Web App, update to a fixed version to resolve the issue. As a temporary workaround, consider avoiding the use of TimeColorBehaviorContainer records in PowerPoint documents until a patch is available. Restrict access to specially crafted or compromised Web sites and avoid opening suspicious e-mail attachments to minimize the risk of exploitation.

Fix

RCE

DoS

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-0655

ZDI-11-123

ZDI-11-124

Affected Products

Office Powerpoint

Office Compatibility Pack For Word

Office For Mac

Open Xml File Format Converter For Mac

Powerpoint Viewer

Powerpoint Web App

References · 11

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-022 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0941 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-11-123 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0655 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-124 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-0655 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0655 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12624 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-022 · Note
• http://us-cert.gov/cas/techalerts/TA11-102A.html · Note
• http://securitytracker.com/id?1025340 · Note