CVE-2009-1128

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than...

CVE-2009-0222

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a differen...

CVE-2009-0223

CVE-2009-0223 affects Microsoft PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 when parsing a PowerPoint 4.0 native file format. The issue is a memory corruption/remote code execution vulnerability triggered by crafted sound data within such files (Legacy File Format vulnerability). Connected adviso...

CVE-2009-1131

CVE-2009-1131 covers a stack-based buffer overflow in Microsoft PowerPoint 2000 SP3, triggered by reading data from a specially crafted CurrentUserAtom record in a PowerPoint file, leading to memory corruption and remote code execution. Connected advisories confirm the flaw is exploited by openin...

CVE-2009-0220

CVE-2009-0220 is a Microsoft PowerPoint vulnerability in the PP4X32.DLL PowerPoint 4.0 importer that caused multiple stack-based buffer overflows. The issue could allow remote code execution when a user opens a specially crafted PowerPoint 4.0 file, with two described overflow paths: an incorrect...

CVE-2009-0225

CVE-2009-0225 is a PP7 Memory Corruption vulnerability in Microsoft PowerPoint 2002 SP3 (and related PowerPoint/OFFICE components) that allows remote code execution when a user opens a specially crafted PowerPoint file (PowerPoint 95 format). Exploitation targets memory corruption via crafted sou...

CVE-2009-1128

Microsoft Office PowerPoint PP7 memory corruption (CVE-2009-1128) affects PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 via the PPT95 importer. Root cause: memory corruption in PP7X32.DLL when parsing sound data from specially crafted PowerPoint 95 files, enabling remote code execution when a user ...

Inside the PowerPoint mega-patch

Microsoft patched all Windows versions of PowerPoint today — addressing both a zero-day flaw microsoft.com and 13 other privately reported security vulnerabilities. The zero-day vulnerability enabled attackers to take over client machines if a user opened a malformed powerpoint document or visite...

Microsoft plugs 14 PowerPoint security holes

Microsoft has slapped a massive band-aid on its PowerPoint presentation software to cover at least 14 documented security vulnerabilities. The MS09-017 update, rated “critical,” includes a fix for a known code execution flaw that was used to launch targeted exploits via rigged PowerPoint files...

Security Update for Microsoft PowerPoint 2002 (KB957781)

A security vulnerability exists in Microsoft PowerPoint 2002 that could allow arbitrary code to run when a maliciously modified document is opened. This update resolves that vulnerability...

Security Update for Microsoft PowerPoint 2003 (KB957784)

A security vulnerability exists in Microsoft PowerPoint 2003 that could allow arbitrary code to run when a maliciously modified document is opened. This update resolves that vulnerability...

Security Update for PowerPoint Viewer 2007 (KB970059)

A security vulnerability exists in Microsoft PowerPoint Viewer 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for the 2007 Microsoft Office System (KB969618)

A security vulnerability exists in Microsoft PowerPoint 2007 that could allow arbitrary code to run when a maliciously modified document is opened. This update resolves that vulnerability...

Microsoft PowerPoint Converter SlideRec Record Memory Corruption (MS09-017; CVE-2009-0222)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...

Microsoft PowerPoint Converter SoundEntity Record Stack Corruption (MS09-017; CVE-2009-1128)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially crafted...

Microsoft PowerPoint Data Out of Bounds Stack Buffer Overflow (MS09-017; CVE-2009-1128; CVE-2009-1131)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overflow vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading data that is too large from...

Microsoft PowerPoint Sound Data (CVE-2009-0227) Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a specially crafted PowerPoint 4.0 file. Successfully exploiting this issue can allow the attacker to execute arbitrary code in the context of the...

Microsoft PowerPoint Sound Data (CVE-2009-0225) Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a malicious PowerPoint 95 file. Successfully exploiting this issue can allow the attacker to execute arbitrary code in the context of the currently...

Microsoft PowerPoint Sound Data (CVE-2009-0223) Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

Secunia Research: Microsoft PowerPoint Atom Parsing Buffer Overflows

====================================================================== Secunia Research 12/05/2009 - Microsoft PowerPoint Atom Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...