CVE-2008-0121

Microsoft PowerPoint Viewer 2003 is affected by CVE-2008-0121 due to a memory calculation error when processing certain records (invalid picture index) in PowerPoint files, leading to remote code execution via crafted presentations. iDefense and related advisories describe an out-of-bounds/ memor...

iDefense Security Advisory 08.12.08: Microsoft PowerPoint Viewer 2003 Cstring Integer Overflow Vulnerability

iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Corp.'s PowerPoint Viewer is a viewer for full-featured presentations created in PowerPoint 97 and later versions. PowerPoint Viewer 2003 is freely downloadable from...

CVE-2008-1455

CVE-2008-1455 describes a remote code execution vulnerability in Microsoft PowerPoint caused by a memory handling flaw while parsing bullet list values in specially crafted PowerPoint files (memory calculation/parsing overflow). Affected products include PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, 2...

MS08-051: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (949785)

The remote host is running a version of Microsoft PowerPoint which is subject to a flaw that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it...

Security Update for Microsoft PowerPoint 2002 (KB948995)

A security vulnerability exists in Microsoft PowerPoint 2002 that could allow arbitrary code to run when a maliciously modified document is opened. This update resolves that vulnerability...

Security Update for Microsoft Office PowerPoint 2003 (KB948988)

A security vulnerability exists in Microsoft Office PowerPoint 2003 that could allow arbitrary code to run when a maliciously modified document is opened. This update resolves that vulnerability...

Microsoft PowerPoint Viewer Memory Allocation Code Execution (MS08-051; CVE-2008-0120; CVE-2008-0121)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. Remote code execution vulnerabilities have been identified in Microsoft PowerPoint. The vulnerabilities are due to memory calculation errors in Microsoft PowerPoint when processing a malformed picture inde...

Microsoft PowerPoint Picture Index Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability due to an integer-overflow error. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code...

Microsoft PowerPoint List Value Parsing Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

Microsoft PowerPoint Picture Index Variant Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious PowerPoint file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

Microsoft Security Bulletin MS08-051 – Critical Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (949785) Microsoft Security Bulletin MS08-051 – Critical

Microsoft Security Bulletin MS08-051 – Critical Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution 949785 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves three privately reported vulnerabilities in Microsoft Office...

MS00-049:Microsoft Office 脚本允许远程保存恶意文件

如果一个Web站点在web页面中嵌入恶意脚本,它调用一个Excel 2000或者PowerPoint文件， 当用户访问这个站点时可能导致一个远程文件可能是恶意的被保存到该用户的硬盘上。 Microsoft Excel 2000 Microsoft PowerPoint 2000 Microsoft PowerPoint 97.0 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 - Microsoft Windows NT 2000 微软已经提供了补丁程序： Microsoft Excel...

Microsoft Word无序列表处理远程内存破坏漏洞

BUGTRAQ ID: 29769 CNCAN ID：CNCAN-2008061908 Microsoft Word是一款流行的文字处理程序。 Microsoft Word无序列表处理存在内存破坏问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 + Microsoft Office 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 + Microsof...

Microsoft PowerPoint TxMasterStyle10Atom Processing Code Execution (MS08-051; CVE-2008-1455)

Microsoft PowerPoint is a popular presentation program. A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to a memory calculation error in Microsoft PowerPoint when parsing bullet list values in specially crafted PowerPoint files. A remote...

Microsoft Office Drawing Shapes memory corruption vulnerability

Added: 04/04/2008 CVE: CVE-2008-0118 BID: 28146 OSVDB: 42709 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem A memory corruption vulnerability allows command...

Microsoft Office Drawing Shapes memory corruption vulnerability

Added: 04/04/2008 CVE: CVE-2008-0118 BID: 28146 OSVDB: 42709 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem A memory corruption vulnerability allows command...

Microsoft Office Drawing Shapes memory corruption vulnerability

Added: 04/04/2008 CVE: CVE-2008-0118 BID: 28146 OSVDB: 42709 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem A memory corruption vulnerability allows command...

Microsoft Office Drawing Shapes memory corruption vulnerability

Added: 04/04/2008 CVE: CVE-2008-0118 BID: 28146 OSVDB: 42709 Background Microsoft Office is a package which provides word processing, spreadsheet, presentation, e-mail, and calendaring capabilities for Microsoft Windows workstations. Problem A memory corruption vulnerability allows command...

Microsoft PowerPoint Drawing Shapes Handling Memory Corruption (MS08-016; CVE-2008-0118)

Microsoft PowerPoint is a popular presentation program. A remote code execution vulnerability has been reported in Microsoft Office. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system.The vulnerability is due to an allocation error in Microsoft...

Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...