CVE-2010-3141

Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm,...

Microsoft Power Point 2010 DLL Hijacking Exploit

/ Exploit Title: Microsoft PowerPoint 2010 DLL Hijacking Exploit pptimpconv.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://office.microsoft.com/en-us/powerpoint/ Version: 14.0.4760.1000 Tested on: Windows 7 x86 6.1.7600 Compile and rename to...

Microsoft Office PowerPoint 2007 12.0.4518 DLL Hijacking Exploit

/ Microsoft Office PowerPoint 2007 v12.0.4518 pp4x322.dll DLL Hijacking Exploit Vendor: Microsoft Corp. Product Web Page: http://www.microsoft.com Affected Version: 12.0.4518.1014 MSO 12.0.4518.1014 Summary: Microsoft PowerPoint is a presentation program by Microsoft. It is part of the Microsoft...

Microsoft Office PowerPoint 2007 v12.0.4518 (pp4x322.dll) DLL Hijacking Exploit

Summary Microsoft PowerPoint is a presentation program by Microsoft. It is part of the Microsoft Office suite, and runs on Microsoft Windows and Apple's Mac OS X operating system. Description MS PowerPoint 2007 suffers from a dll hijacking vulnerability that enables the attacker to execute...

Microsoft PowerPoint 2007 - 'rpawinet.dll' DLL Hijacking

/ Exploit Title: Microsoft Office PowerPoint 2007 DLL Hijacking Exploit rpawinet.dll Date: August 25, 2010 Author: storm [email protected] Version: 2007 12.0.6535.5002 SP2 Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o rpawinet.dll PowerPoint-DLL.c .odp, .pothtm...

Microsoft PowerPoint 2010 - pptimpconv.dll DLL Hijacking

Microsoft PowerPoint 2010 - pptimpconv.dll DLL Hijacking / Exploit Title: Microsoft PowerPoint 2010 DLL Hijacking Exploit pptimpconv.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://office.microsoft.com/en-us/powerpoint/ Version: 14.0.4760.1000 Teste...

Microsoft Power Point 2010 DLL Hijacking (pptimpconv.dll) Exploit

Exploit for windows platform in category local exploits ================================================================= Microsoft Power Point 2010 DLL Hijacking pptimpconv.dll Exploit ================================================================= / Exploit Title: Microsoft PowerPoint 2010 DL...

Microsoft PowerPoint 2010 - 'pptimpconv.dll' DLL Hijacking

/ Exploit Title: Microsoft PowerPoint 2010 DLL Hijacking Exploit pptimpconv.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://office.microsoft.com/en-us/powerpoint/ Version: 14.0.4760.1000 Tested on: Windows 7 x86 6.1.7600 Compile and rename to...

Microsoft PowerPoint Viewer TextBytesAtom Stack Buffer Overflow

$Id: ms10004textbytesatom.rb 9299 2010-05-14 02:43:55Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft PowerPoint PPT File Parsing Memory Corruption (CVE-2006-3656)

There exists a memory corruption vulnerability in Microsoft PowerPoint. The flaw is caused due to an insufficient checks of a malformed record contained within a PowerPoint file. An attacker can exploit this vulnerability to inject and execute arbitrary code in the security context of the current...

Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow

Added: 03/04/2010 CVE: CVE-2010-0033 BID: 38107 OSVDB: 62241 Background Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself. Problem A stack overflow vulnerability in the handling of TextBytesAtom...

Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow

Added: 03/04/2010 CVE: CVE-2010-0033 BID: 38107 OSVDB: 62241 Background Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself. Problem A stack overflow vulnerability in the handling of TextBytesAtom...

Microsoft PowerPoint TextCharsAtom记录解析栈溢出漏洞（MS10-004）

BUGTRAQ ID: 38107 CVE ID: CVE-2010-0034 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件中的TextCharsAtom（0x0fa0）记录时没有对大小参数执行边界检查，memcpy将文件中的用户数据拷贝到了栈上，这可能溢出关键的异常结构，导致执行任意代码。 Microsoft PowerPoint 2003 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁:...

Microsoft PowerPoint文件路径解析栈溢出漏洞（MS10-004）

BUGTRAQ ID: 38099 CVE ID: CVE-2010-0029 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint在解析PPT文件中的超长文件路径字段时存在栈溢出漏洞，用户受骗打开恶意文件就可能导致执行任意代码。成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft PowerPoint 2002 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁: MS10-004：Vulnerabilities in Microsof...

Microsoft PowerPoint OEPlaceholderAtom记录释放后使用漏洞（MS10-004）

BUGTRAQ ID: 38104 CVE ID: CVE-2010-0032 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件msofbtClientData容器中的OEPlaceholderAtom记录时存在释放后使用漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 OEPlaceholderAtom记录类型用于为幻灯片的图片、文本等对象创建占位符。在解析msofbtClientData容器中的一系列 OEPlaceholderAtom记录时，就可能触发释放后使用漏洞，导致执行任意代码。 Microsoft...

Microsoft PowerPoint LinkedSlideAtom堆溢出漏洞（MS10-004）

BUGTRAQ ID: 38101 CVE ID: CVE-2010-0030 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件的方式中存在一个堆溢出漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 在解析两个相关的PowerPoint记录类型期间会出现这个漏洞。第一个记录类型LinkedSlideAtom用于指定不同幻灯片的协作信息，该记录中的一个字段用于指定文件中所出现的某些记录的数目。负责填充用于存储记录数组的代码在将元素储存到数组中时没有执行任何边界检查，这可能导致堆溢出。 Microsoft...

Microsoft PowerPoint TextBytesAtom记录解析栈溢出漏洞（MS10-004）

BUGTRAQ ID: 38107 CVE ID: CVE-2010-0033 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件中的TextBytesAtom记录时没有对大小参数执行边界检查，memcpy将文件中的用户数据拷贝到了栈上，这可能溢出关键的异常结构，导致执行任意代码。 Microsoft PowerPoint 2003 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁: MS10-004：Vulnerabilities...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Invalid Array Indexing Vulnerability

iDefense Security Advisory 02.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 09, 2010 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more information, see the vendor's site found at the...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...