CVE-2009-0222

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to a "pointer overwrite" and memory corruption, aka "Legacy File Format Vulnerability," a differen...

CVE-2009-1128

Microsoft Office PowerPoint PP7 memory corruption (CVE-2009-1128) affects PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 via the PPT95 importer. Root cause: memory corruption in PP7X32.DLL when parsing sound data from specially crafted PowerPoint 95 files, enabling remote code execution when a user ...

CVE-2009-1128

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka "PP7 Memory Corruption Vulnerability," a different vulnerability than...

CVE-2009-0225

CVE-2009-0225 is a PP7 Memory Corruption vulnerability in Microsoft PowerPoint 2002 SP3 (and related PowerPoint/OFFICE components) that allows remote code execution when a user opens a specially crafted PowerPoint file (PowerPoint 95 format). Exploitation targets memory corruption via crafted sou...

CVE-2009-0225

Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."...

CVE-2009-0220

CVE-2009-0220 is a Microsoft PowerPoint vulnerability in the PP4X32.DLL PowerPoint 4.0 importer that caused multiple stack-based buffer overflows. The issue could allow remote code execution when a user opens a specially crafted PowerPoint 4.0 file, with two described overflow paths: an incorrect...

CVE-2009-0221

CVE-2009-0221 affects Microsoft Office PowerPoint 2002 SP3 and PowerPoint 2003 SP3. The issue is an integer overflow while parsing a PowerPoint record type (collaboration information for slides), which can trigger a heap-based buffer overflow and allow remote code execution when a user opens a ma...

CVE-2009-1131

CVE-2009-1131 covers a stack-based buffer overflow in Microsoft PowerPoint 2000 SP3, triggered by reading data from a specially crafted CurrentUserAtom record in a PowerPoint file, leading to memory corruption and remote code execution. Connected advisories confirm the flaw is exploited by openin...

CVE-2009-0223

CVE-2009-0223 affects Microsoft PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 when parsing a PowerPoint 4.0 native file format. The issue is a memory corruption/remote code execution vulnerability triggered by crafted sound data within such files (Legacy File Format vulnerability). Connected adviso...

Inside the PowerPoint mega-patch

Microsoft patched all Windows versions of PowerPoint today — addressing both a zero-day flaw microsoft.com and 13 other privately reported security vulnerabilities. The zero-day vulnerability enabled attackers to take over client machines if a user opened a malformed powerpoint document or visite...

Microsoft plugs 14 PowerPoint security holes

Microsoft has slapped a massive band-aid on its PowerPoint presentation software to cover at least 14 documented security vulnerabilities. The MS09-017 update, rated “critical,” includes a fix for a known code execution flaw that was used to launch targeted exploits via rigged PowerPoint files...

Security Update for Microsoft PowerPoint 2002 (KB957781)

A security vulnerability exists in Microsoft PowerPoint 2002 that could allow arbitrary code to run when a maliciously modified document is opened. This update resolves that vulnerability...

Security Update for PowerPoint Viewer 2007 (KB970059)

A security vulnerability exists in Microsoft PowerPoint Viewer 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft PowerPoint 2003 (KB957784)

A security vulnerability exists in Microsoft PowerPoint 2003 that could allow arbitrary code to run when a maliciously modified document is opened. This update resolves that vulnerability...

Security Update for the 2007 Microsoft Office System (KB969618)

A security vulnerability exists in Microsoft PowerPoint 2007 that could allow arbitrary code to run when a maliciously modified document is opened. This update resolves that vulnerability...

Microsoft PowerPoint Sound Data (CVE-2009-0227) Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a specially crafted PowerPoint 4.0 file. Successfully exploiting this issue can allow the attacker to execute arbitrary code in the context of the...

Microsoft PowerPoint Data Out of Bounds Stack Buffer Overflow (MS09-017; CVE-2009-1128; CVE-2009-1131)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A stack buffer overflow vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading data that is too large from...

Microsoft PowerPoint Sound Data (CVE-2009-0223) Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

Microsoft PowerPoint Sound Data (CVE-2009-0222) Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

Microsoft PowerPoint Converter CoCollection Record Handling Error (MS09-017; CVE-2009-0226)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory corruption error in Microsoft PowerPoint when reading sound data from specially craft...