Microsoft PowerPoint PPT File Parsing Memory Corruption (CVE-2006-3656)

There exists a memory corruption vulnerability in Microsoft PowerPoint. The flaw is caused due to an insufficient checks of a malformed record contained within a PowerPoint file. An attacker can exploit this vulnerability to inject and execute arbitrary code in the security context of the current...

Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow

Added: 03/04/2010 CVE: CVE-2010-0033 BID: 38107 OSVDB: 62241 Background Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself. Problem A stack overflow vulnerability in the handling of TextBytesAtom...

Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow

Added: 03/04/2010 CVE: CVE-2010-0033 BID: 38107 OSVDB: 62241 Background Microsoft PowerPoint Viewer 2003 is a free tool which allows viewing of Microsoft PowerPoint presentations without requiring Microsoft PowerPoint itself. Problem A stack overflow vulnerability in the handling of TextBytesAtom...

Microsoft PowerPoint TextCharsAtom记录解析栈溢出漏洞（MS10-004）

BUGTRAQ ID: 38107 CVE ID: CVE-2010-0034 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件中的TextCharsAtom（0x0fa0）记录时没有对大小参数执行边界检查，memcpy将文件中的用户数据拷贝到了栈上，这可能溢出关键的异常结构，导致执行任意代码。 Microsoft PowerPoint 2003 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁:...

Microsoft PowerPoint TextBytesAtom记录解析栈溢出漏洞（MS10-004）

BUGTRAQ ID: 38107 CVE ID: CVE-2010-0033 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件中的TextBytesAtom记录时没有对大小参数执行边界检查，memcpy将文件中的用户数据拷贝到了栈上，这可能溢出关键的异常结构，导致执行任意代码。 Microsoft PowerPoint 2003 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁: MS10-004：Vulnerabilities...

Microsoft PowerPoint文件路径解析栈溢出漏洞（MS10-004）

BUGTRAQ ID: 38099 CVE ID: CVE-2010-0029 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint在解析PPT文件中的超长文件路径字段时存在栈溢出漏洞，用户受骗打开恶意文件就可能导致执行任意代码。成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft PowerPoint 2002 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁: MS10-004：Vulnerabilities in Microsof...

Microsoft PowerPoint OEPlaceholderAtom记录释放后使用漏洞（MS10-004）

BUGTRAQ ID: 38104 CVE ID: CVE-2010-0032 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件msofbtClientData容器中的OEPlaceholderAtom记录时存在释放后使用漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 OEPlaceholderAtom记录类型用于为幻灯片的图片、文本等对象创建占位符。在解析msofbtClientData容器中的一系列 OEPlaceholderAtom记录时，就可能触发释放后使用漏洞，导致执行任意代码。 Microsoft...

Microsoft PowerPoint LinkedSlideAtom堆溢出漏洞（MS10-004）

BUGTRAQ ID: 38101 CVE ID: CVE-2010-0030 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件的方式中存在一个堆溢出漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 在解析两个相关的PowerPoint记录类型期间会出现这个漏洞。第一个记录类型LinkedSlideAtom用于指定不同幻灯片的协作信息，该记录中的一个字段用于指定文件中所出现的某些记录的数目。负责填充用于存储记录数组的代码在将元素储存到数组中时没有执行任何边界检查，这可能导致堆溢出。 Microsoft...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Invalid Array Indexing Vulnerability

iDefense Security Advisory 02.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 09, 2010 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more information, see the vendor's site found at the...

iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Use-After-Free Vulnerability

iDefense Security Advisory 02.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 09, 2010 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more information, see the vendor's site found at the...

Heap overflow

Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability."...

Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow

====================================================================== Secunia Research 09/02/2010 - Microsoft PowerPoint File Path Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow

====================================================================== Secunia Research 09/02/2010 - Microsoft PowerPoint File Path Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

Microsoft PowerPoint 'LinkedSlideAtom' Heap Overflow Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious PowerPoint file. Successful exploits would allow the attacker to execute arbitrary code in the context of the currently...

Microsoft PowerPoint LinkedSlideAtom Heap Overflow (MS10-004; CVE-2010-0030)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a heap overflow in Microsoft PowerPoint LinkedSlideAtom when processing malicious PowerPoint...

Microsoft PowerPoint File Path Handling Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a malicious PowerPoint file. Successful exploits would allow the attacker to execute arbitrary code in the context of the currently logged-in user...