Microsoft PowerPoint OEPlaceholderAtom记录无效数组索引漏洞（MS10-004）

BUGTRAQ ID: 38103 CVE ID: CVE-2010-0031 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件OEPlaceholderAtom记录中的placementId字段值时存在数组索引漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 OEPlaceholderAtom记录类型用于为幻灯片的图片、文本等对象创建占位符。如果用户提供的值大于数组大小，就可以用固定的值破坏数组边界外的栈内存。通过覆盖关键结构（如保存的返回地址），就可以导致执行任意代码。 Microsoft Office 20...

Microsoft PowerPoint LinkedSlideAtom堆溢出漏洞（MS10-004）

BUGTRAQ ID: 38101 CVE ID: CVE-2010-0030 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件的方式中存在一个堆溢出漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 在解析两个相关的PowerPoint记录类型期间会出现这个漏洞。第一个记录类型LinkedSlideAtom用于指定不同幻灯片的协作信息，该记录中的一个字段用于指定文件中所出现的某些记录的数目。负责填充用于存储记录数组的代码在将元素储存到数组中时没有执行任何边界检查，这可能导致堆溢出。 Microsoft...

Microsoft PowerPoint TextCharsAtom记录解析栈溢出漏洞（MS10-004）

BUGTRAQ ID: 38107 CVE ID: CVE-2010-0034 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件中的TextCharsAtom（0x0fa0）记录时没有对大小参数执行边界检查，memcpy将文件中的用户数据拷贝到了栈上，这可能溢出关键的异常结构，导致执行任意代码。 Microsoft PowerPoint 2003 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁:...

Microsoft PowerPoint TextBytesAtom记录解析栈溢出漏洞（MS10-004）

BUGTRAQ ID: 38107 CVE ID: CVE-2010-0033 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件中的TextBytesAtom记录时没有对大小参数执行边界检查，memcpy将文件中的用户数据拷贝到了栈上，这可能溢出关键的异常结构，导致执行任意代码。 Microsoft PowerPoint 2003 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁: MS10-004：Vulnerabilities...

Microsoft PowerPoint OEPlaceholderAtom记录释放后使用漏洞（MS10-004）

BUGTRAQ ID: 38104 CVE ID: CVE-2010-0032 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint处理特制PPT文件msofbtClientData容器中的OEPlaceholderAtom记录时存在释放后使用漏洞，成功利用此漏洞的攻击者可完全控制受影响的系统。 OEPlaceholderAtom记录类型用于为幻灯片的图片、文本等对象创建占位符。在解析msofbtClientData容器中的一系列 OEPlaceholderAtom记录时，就可能触发释放后使用漏洞，导致执行任意代码。 Microsoft...

Microsoft PowerPoint文件路径解析栈溢出漏洞（MS10-004）

BUGTRAQ ID: 38099 CVE ID: CVE-2010-0029 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint在解析PPT文件中的超长文件路径字段时存在栈溢出漏洞，用户受骗打开恶意文件就可能导致执行任意代码。成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft PowerPoint 2002 SP3 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS10-004）以及相应补丁: MS10-004：Vulnerabilities in Microsof...

Microsoft PowerPoint "OEPlaceholderAtom" record vulnerability

No description provided by source. iDefense Security Advisory 02.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 09, 2010 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more information, see...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

iDefense Security Advisory 02.09.10: Microsoft PowerPoint LinkedSlideAtom Heap Overflow Vulnerability

iDefense Security Advisory 02.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 09, 2010 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more information, see the vendor's site found at the...

Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption

Added: 02/12/2010 CVE: CVE-2010-0031 BID: 38103 OSVDB: 62237 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A memory corruption vulnerability allows command execution when a user opens a PowerPoint file containing an...

iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Use-After-Free Vulnerability

iDefense Security Advisory 02.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 09, 2010 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more information, see the vendor's site found at the...

iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Invalid Array Indexing Vulnerability

iDefense Security Advisory 02.09.10 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 09, 2010 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more information, see the vendor's site found at the...

CVE-2010-0030

Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint LinkedSlideAtom Heap Overflow Vulnerability."...

CVE-2010-0032

Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "OEPlaceholderAtom Use After Free Vulnerability."...

CVE-2010-0034

Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability."...

CVE-2010-0033

Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."...

CVE-2010-0031

Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability."...

CVE-2010-0029

Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling Buffer Overflow Vulnerability."...