Microsoft PowerPoint BuildList记录内存破坏漏洞（MS09-017）

BUGTRAQ ID: 34879 CVECAN ID: CVE-2009-0224 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint在解析BuildList记录时存在内存破坏漏洞。BuildList记录是用于描述PowerPoint文件中表格和图标的其他记录的容器。如果所注入的多个BuildList记录中包含有ChartBuild容器的话，在解析ChartBuild容器的内容时就会触发内存破坏，允许攻击者控制对象指针并引用受控的函数。 Microsoft Office 2008 for Mac Microsoft Office 20...

iDefense Security Advisory 05.12.09: Microsoft PowerPoint Build List Memory Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 05.12.09 http://labs.idefense.com/intelligence/vulnerabilities/ May 12, 2009 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more...

CVE-2009-0224

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter for Mac; Microsoft Works 8.5 and 9.0; and Microsoft Office Compatibility Pack f...

CVE-2009-0224

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter for Mac; Microsoft Works 8.5 and 9.0; and Microsoft Office Compatibility Pack f...

CVE-2009-0224

CVE-2009-0224 is a Memory Corruption Vulnerability in Microsoft PowerPoint. It affects PowerPoint and related components across Windows and Mac platforms (PowerPoint 2000/2002/2003/2007; PowerPoint Viewer 2003/2007; PowerPoint on Mac 2004/2008; Open XML Converter for Mac; Microsoft Works 8.5/9.0;...

Microsoft PowerPoint Invalid Build Object Casting Memory Corruption (MS09-017; CVE-2009-0224)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A memory corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading an invalid record type in a special...