Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow

Added: 03/04/2010
CVE: CVE-2010-0033
BID: 38107
OSVDB: 62241

Background

Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself.

Problem

A stack overflow vulnerability in the handling of TextBytesAtom records allows command execution when a user opens a PowerPoint file containing an overly long TextBytesAtom record.

Resolution

Install the update referenced in Microsoft Security Bulletin 10-004.

References

<http://www.zerodayinitiative.com/advisories/ZDI-10-017/&gt;

Limitations

Exploit works on Microsoft PowerPoint Viewer 2003 SP3 and requires a user to load the exploit file in the affected software.

It may take a longer than usual time to establish a shell connection after the user opens the exploit file.

Platforms

Windows