PT-2011-2534 · Microsoft · Office For Mac+5

Published 2011-04-12 · Updated 2018-10-12 · CVE-2011-0656

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint versions 2002 SP3, 2003 SP3, 2007 SP2, and 2010 Office for Mac versions 2004, 2008, and 2011 Open XML File Format Converter for Mac Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 PowerPoint Viewer PowerPoint Viewer 2007 SP2 PowerPoint Web App

Description The issue arises from the improper validation of PersistDirectoryEntry records in PowerPoint documents, allowing remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be triggered by a Slide with a malformed record, leading to an exception and later use of an unspecified method. A remote code execution vulnerability exists in the way that Microsoft PowerPoint handles specially crafted PowerPoint files, which could be included as an e-mail attachment or hosted on a specially crafted or compromised Web site.

Recommendations For Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010, update to a newer version to mitigate the risk. For Office for Mac versions 2004, 2008, and 2011, update to a newer version to mitigate the risk. For Open XML File Format Converter for Mac, update to a newer version to mitigate the risk. For Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2, update to a newer version to mitigate the risk. For PowerPoint Viewer and PowerPoint Viewer 2007 SP2, update to a newer version to mitigate the risk. For PowerPoint Web App, update to a newer version to mitigate the risk. As a temporary workaround, consider avoiding the use of PersistDirectoryEntry records in PowerPoint documents until a patch is available.

Fix

RCE

DoS

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-0656

ZDI-11-125

Affected Products

Office Powerpoint

Office Compatibility Pack For Word

Office For Mac

Open Xml File Format Converter For Mac

Powerpoint Viewer

Powerpoint Web App

References · 14

• http://vupen.com/english/advisories/2011/0941 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0656 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0656 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-022 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-11-125 · Security Note
• http://securityfocus.com/bid/47251 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-022 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11761 · Note
• http://us-cert.gov/cas/techalerts/TA11-102A.html · Note
• http://securitytracker.com/id?1025340 · Note
• http://osvdb.org/71770 · Note
• http://zerodayinitiative.com/advisories/ZDI-11-125 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0656 · Note
• http://securityfocus.com/archive/1/517482/100/0/threaded · Note