Microsoft PowerPoint Picture Index Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability due to an integer-overflow error. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code...

Microsoft PowerPoint Picture Index Variant Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

Microsoft PowerPoint TxMasterStyle10Atom Processing Code Execution (MS08-051; CVE-2008-1455)

Microsoft PowerPoint is a popular presentation program. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory calculation error in Microsoft PowerPoint when parsing bullet list values in specially crafted PowerPoint files. A remote...

Microsoft Office Drawing Shapes memory corruption vulnerability

Added: 04/04/2008 CVE: CVE-2008-0118 BID: 28146 OSVDB: 42709 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem A memory corruption vulnerability allows command...

Microsoft Office Drawing Shapes memory corruption vulnerability

Added: 04/04/2008 CVE: CVE-2008-0118 BID: 28146 OSVDB: 42709 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem A memory corruption vulnerability allows command...

Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...

Design/Logic Flaw

Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...

CVE-2007-0913

Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...

CVE-2007-0913

Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G. NOTE: as of 20070213, it is not clear whether this is the same issue as CVE-2006-5296, CVE-2006-4694, CVE-2006-3876,...

CVE-2007-0913

CVE-2007-0913 is described as an unspecified remote code execution vulnerability in Microsoft PowerPoint exploited by Trojan.PPDropper.G. Connected advisories (MS06-058 family) detail related PowerPoint memory corruption flaws caused by malformed records or non-container/malformed data in PPT par...

Microsoft PowerPoint malformed data record vulnerability

Added: 01/17/2007 CVE: CVE-2006-3876 BID: 20322 OSVDB: 29447 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed Data records in PowerPoint files allows command execution. Resolution Apply the patch...

Microsoft PowerPoint malformed data record vulnerability

Added: 01/17/2007 CVE: CVE-2006-3876 BID: 20322 OSVDB: 29447 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed Data records in PowerPoint files allows command execution. Resolution Apply the patch...

Microsoft PowerPoint malformed data record vulnerability

Added: 01/17/2007 CVE: CVE-2006-3876 BID: 20322 OSVDB: 29447 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed Data records in PowerPoint files allows command execution. Resolution Apply the patch...

Microsoft PowerPoint malformed data record vulnerability

Added: 01/17/2007 CVE: CVE-2006-3876 BID: 20322 OSVDB: 29447 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed Data records in PowerPoint files allows command execution. Resolution Apply the patch...

Microsoft PowerPoint未明代码执行漏洞

Microsoft PowerPoint是一款流行的图片展示应用程序。 Microsoft PowerPoint处理恶意PPT文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Microsoft PowerPoint 2003 SP2及之前版本 http://www.microsoft.com/technet/security...

CVE-2006-6120

CVE-2006-6120 affects KOffice before 1.6.1, specifically the KPresenter PPT import filter (filters/olefilters/lib/klaola.cc). The vulnerability is an integer overflow in the PPT handling path that can lead to a heap-based buffer overflow when a crafted PPT file is opened, enabling a user‑assisted...

Microsoft PowerPoint 2000远程信息泄露漏洞（MS06-010）

Microsoft PowerPoint是一款流行的办公软件，主要用于演示演讲稿。 Microsoft PowerPoint 2000在同Internet Explorer交互时存在信息泄露漏洞，可能允许远程攻击者通过名称尝试访问临时Internet文件文件夹（TIFF）中的对象来获得敏感信息。 Microsoft PowerPoint 2000 Microsoft已经为此发布了一个安全公告（MS06-010）以及相应补丁: MS06-010：Vulnerability in PowerPoint 2000 Could Allow Information Disclosure 88916...

Microsoft PowerPoint畸形记录远程代码执行漏洞（MS06-028）

Microsoft PowerPoint是非常流行的文稿演示工具。 PowerPoint在处理畸形记录的时候存在内存破坏漏洞，攻击者可以通过创建特制的PowerPoint文件来利用这个漏洞，如果用户访问了该文件的话就会导致代码执行。 Microsoft PowerPoint v.X for Mac Microsoft PowerPoint 2004 for Mac Microsoft PowerPoint 2003 Microsoft PowerPoint 2002 Microsoft PowerPoint 2000 临时解决方法： 不要打开不可信任来源接收到的Microsoft...

Microsoft Powerpoint远程执行任意代码漏洞（MS06-048）

Microsoft Powerpoint是非常流行的文稿演示工具。 Powerpoint在解析特制文档中的某些字符串时存在错误，可能允许攻击者通过诱骗用户打开恶意PPT文档执行任意代码。 目前这个漏洞正在被名为Trojan.PPDropper.B的木马积极的利用。 Microsoft PowerPoint 2003 SP2 Microsoft PowerPoint 2003 SP1 Microsoft PowerPoint 2003 Microsoft已经为此发布了一个安全公告（MS06-048）以及相应补丁: MS06-048：Vulnerabilities in Microsoft...

Microsoft PowerPoint畸形记录远程代码执行漏洞（MS06-058）

PowerPoint是非常流行的电子文稿演示工具。 PowerPoint的实现在处理畸形记录时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 当PowerPoint处理畸形记录时可能触发一个非授权内存访问，攻击者可能利用此漏洞。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft PowerPoint 2003 SP3 Microsoft PowerPoint 2003 SP2 Microsoft PowerPoint 2003 SP1 Microsoft PowerPoint 2003 Microsoft PowerPoint...