ZDI-09-020: Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability

ZDI-09-020: Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-020 May 12, 2009 -- CVE ID: CVE-2009-1130 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office PowerPoint -- TippingPointTM IPS Customer...

CVE-2009-1130

Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was...

Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office's PowerPoint. User interaction is required to exploit this vulnerability in that the target must open up a malicious file. The vulnerability exists within the parsing of certain...