Microsoft Office PowerPoint PPT解析堆溢出漏洞（MS10-088）

BUGTRAQ ID: 44628 CVE ID: CVE-2010-2573 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint在解析PPT文件时错误的信任了文件中所定义的值并对这个值执行了一些算术计算，之后用作了循环的计数器。通过修改这个值，攻击者就可以触发整数下溢，最终导致堆溢出。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Office 2004 for Mac Microsoft PowerPoint Viewer 2007 SP2 Microsoft PowerPoint 2003 SP3...

openSUSE Security Update : OpenOffice_org-draw (openSUSE-SU-2010:0732-1)

Specially crafted ppt files could cause a heap based buffer overflow in OpenOfficeorg Impress. Attackers could exploit that to crash OpenOfficeorg or potentially even execute arbitrary code CVE-2010-2935, CVE-2010-2936. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2010-3141

Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm,...

TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability

TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-10-02 February 9, 2010 -- CVE ID: CVE-2010-0034 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office PowerPoint Viewer -- TippingPointTM I...

Microsoft PowerPoint Freelance布局解析堆溢出漏洞

BUGTRAQ ID: 35275 CVECAN ID: CVE-2009-0202 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint的Freelance Windows 2.1 Translator（FL21WIN.DLL）在解析布局信息时存在数组索引错误，如果用户受骗打开了恶意的PPT文件就可能触发堆溢出，导致执行任意指令。 安装了MS09-017更新的系统默认下会禁用对Freelance文件的支持，但可在注册表中手动重新启用。 Microsoft PowerPoint 2002 Microsoft PowerPoint 2000...

PPT 0day-vulnerability warning-the black bar safety net

Author: wordexp ppt "0day"configuration mode:new keys a PPT,find a 9f 0f 0 4 0 0 0 0 0 0,put back the byte to 0 3 0 0 0 0 0 0 TextHeaderAtom 3 9 9 9,9f0f,atom: this record indicates that after the text atom of meaning that can be used to distinguish text is separated into different blocks Value...

Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office PowerPoint. Exploitation requires that the attacker coerce the target into opening a malicious .PPT file. The specific flaw exists in the parsing of the OutlineTextRefAtom 3998. By...

Microsoft PowerPoint Viewer 2003 Cstring对象整数溢出漏洞（MS08-051）

BUGTRAQ ID: 30552 CVECAN ID: CVE-2008-0120 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint Viewer 2003在处理PPT演示文件中内嵌的CString对象时存在整数溢出漏洞，如果用户受骗打开了恶意的PPT文件的话，内嵌的对象可能导致分配很少的缓冲区而拷贝大量数据，触发这个溢出，最终导致可利用的堆溢出。 Microsoft PowerPoint Viewer 2003 临时解决方法： 不要打开或保存从不受信任来源或从受信任来源意外收到的Microsoft Office文件。 厂商补丁：...

Microsoft Office XP SP3 PPT File Buffer Overflow Exploit (ms08-0 1 6)-vulnerability warning-the black bar safety net

Runs calc.exe on the Office XP SP3 with updates 03/11/08. Just for fun... [email protected] milw0rm.com 2008-03-30...

Microsoft Office XP SP3 PPT File Buffer Overflow Exploit (ms08-016)

No description provided by source. Runs calc.exe on Office XP SP3 with updates 03/11/08. Just for fun... http://sebug.net/paper/poc/2008-ms08-016.tgz [email protected]...

Microsoft Office XP SP3 PPT File Buffer Overflow Exploit (ms08-016)

Exploit for unknown platform in category local exploits =================================================================== Microsoft Office XP SP3 PPT File Buffer Overflow Exploit ms08-016 =================================================================== back: http://inj3ct0r.com/sploits/547.r...

Microsoft Office XP SP3 - .PPT File Buffer Overflow (MS08-016)

Microsoft Office XP SP3 - .PPT File Buffer Overflow MS08-016 Runs calc.exe on Office XP SP3 with updates 03/11/08. Just for fun... https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/5320.tgz 2008-ms08-016.tgz [email protected] milw0rm.com 2008-03-30...

FTP Server Zipped .ppt File Uploaded

Binary data 4055.prm...

Moderate: Red Hat Security Advisory: koffice security update

Updated KOffice packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. KOffice is a collection of productivity applications for the K Desktop Environment KDE GUI...

Mandrake Linux Security Advisory : koffice (MDKSA-2006:222)

An integer overflow was discovered in KOffice's filtering code. By tricking a user into opening a specially crafted PPT file, attackers could crash KOffice or possibly execute arbitrary code with the user's privileges. The updated packages have been patched to correct this issue. %NASLMINLEVEL...

[slackware-security] koffice

A new koffice package is available for Slackware 10.2 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-6120 Here are the details from the Slackware 10.2 ChangeLog:...

Microsoft PowerPoint未明代码执行漏洞

Microsoft PowerPoint是一款流行的图片展示应用程序。 Microsoft PowerPoint处理恶意PPT文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Microsoft PowerPoint 2003 SP2及之前版本 http://www.microsoft.com/technet/security...

KOffice畸形PPT文件处理整数溢出漏洞

KOffice是基于Linux的办公软件应用程序。 KOffice在处理带有畸形内容的PPT文档时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 KOffice的filters/olefilters/lib/klaola.cc文件中KLaola::readBigBlockDepot方法存在整数溢出漏洞。如果用户受骗打开了特制的.ppt文件的话，就会触发堆溢出，导致执行任意指令。 KDE KOffice 1.6.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-6120

Integer overflow in the KPresenter import filter for Microsoft PowerPoint files filters/olefilters/lib/klaola.cc in KOffice before 1.6.1 allows user-assisted remote attackers to execute arbitrary code via a crafted PPT file, which results in a heap-based buffer overflow...

CVE-2006-6120

CVE-2006-6120 affects KOffice before 1.6.1, specifically the KPresenter PPT import filter (filters/olefilters/lib/klaola.cc). The vulnerability is an integer overflow in the PPT handling path that can lead to a heap-based buffer overflow when a crafted PPT file is opened, enabling a user‑assisted...