ZDI-09-020: Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability

ZDI-09-020: Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-020 May 12, 2009 -- CVE ID: CVE-2009-1130 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office PowerPoint -- TippingPointTM IPS Customer...

iDefense Security Advisory 05.12.09: Microsoft PowerPoint Notes Container Heap Corruption Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 05.12.09 http://labs.idefense.com/intelligence/vulnerabilities/ May 12, 2009 I. BACKGROUND Microsoft PowerPoint is an application used for constructing presentations, and comes with the Microsoft Office suite. For more...

CVE-2009-1130

CVE-2009-1130 arises from a heap-based buffer overflow in Microsoft Office PowerPoint when parsing the Notes container. The issue occurs in PowerPoint 2002 SP3, 2003 SP3, and PowerPoint in Office 2004 for Mac, when a crafted Notes structure causes PowerPoint to read more data than allocated, lead...

Microsoft PowerPoint Notes Record Parsing Heap Corruption (MS09-017; CVE-2009-1130)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A heap corruption vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading a malformed structure value in a...