Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : openoffice.org vulnerabilities (USN-1056-1)

Charlie Miller discovered several heap overflows in PPT processing. If a user or automated system were tricked into opening a specially crafted PPT document, a remote attacker could execute arbitrary code with user privileges. Ubuntu 10.10 was not affected. CVE-2010-2935, CVE-2010-2936 Marc...

RHEL 5 : openoffice.org (RHSA-2011:0182)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0182 advisory. - OpenOffice.org: directory traversal flaws in handling of XSLT jar filter descriptions and OXT extension files CVE-2010-3450 -...

CVE-2010-4253

Heap-based buffer overflow in Impress in OpenOffice.org OOo 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint aka PPT...

CVE-2010-4253

CVE-2010-4253 is confirmed in OpenOffice/OpenOffice Impress. The vulnerability is a heap-based buffer overflow in Impress of OpenOffice.org 2.x and 3.x (before 3.3) triggered by a crafted PNG inside an ODF or Microsoft Office document (e.g., PowerPoint), leading to a remote crash or possible arbi...

SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 7148)

Specially crafted ppt files could cause a heap-based buffer overflow in OpenOfficeorg Impress. Attackers could exploit that to crash OpenOfficeorg or potentially even execute arbitrary code. CVE-2010-2935 / CVE-2010-2936 This update also fixes numerous non-security bugs. Please refer to the packa...

Microsoft Office PowerPoint PPT解析堆溢出漏洞（MS10-088）

BUGTRAQ ID: 44628 CVE ID: CVE-2010-2573 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint在解析PPT文件时错误的信任了文件中所定义的值并对这个值执行了一些算术计算，之后用作了循环的计数器。通过修改这个值，攻击者就可以触发整数下溢，最终导致堆溢出。成功利用此漏洞的攻击者可以完全控制受影响的系统。 Microsoft Office 2004 for Mac Microsoft PowerPoint Viewer 2007 SP2 Microsoft PowerPoint 2003 SP3...

openSUSE Security Update : OpenOffice_org-draw (openSUSE-SU-2010:0732-1)

Specially crafted ppt files could cause a heap based buffer overflow in OpenOfficeorg Impress. Attackers could exploit that to crash OpenOfficeorg or potentially even execute arbitrary code CVE-2010-2935, CVE-2010-2936. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2010-3141

Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse pptimpconv.dll that is located in the same folder as a .odp, .pot, .potm, .potx, .ppa, .pps, .ppsm,...

TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability

TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-10-02 February 9, 2010 -- CVE ID: CVE-2010-0034 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Office PowerPoint Viewer -- TippingPointTM I...

Microsoft PowerPoint Freelance布局解析堆溢出漏洞

BUGTRAQ ID: 35275 CVECAN ID: CVE-2009-0202 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint的Freelance Windows 2.1 Translator（FL21WIN.DLL）在解析布局信息时存在数组索引错误，如果用户受骗打开了恶意的PPT文件就可能触发堆溢出，导致执行任意指令。 安装了MS09-017更新的系统默认下会禁用对Freelance文件的支持，但可在注册表中手动重新启用。 Microsoft PowerPoint 2002 Microsoft PowerPoint 2000...

PPT 0day-vulnerability warning-the black bar safety net

Author: wordexp ppt "0day"configuration mode:new keys a PPT,find a 9f 0f 0 4 0 0 0 0 0 0,put back the byte to 0 3 0 0 0 0 0 0 TextHeaderAtom 3 9 9 9,9f0f,atom: this record indicates that after the text atom of meaning that can be used to distinguish text is separated into different blocks Value...

Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office PowerPoint. Exploitation requires that the attacker coerce the target into opening a malicious .PPT file. The specific flaw exists in the parsing of the OutlineTextRefAtom 3998. By...

Microsoft PowerPoint Viewer 2003 Cstring对象整数溢出漏洞（MS08-051）

BUGTRAQ ID: 30552 CVECAN ID: CVE-2008-0120 Microsoft PowerPoint是微软Office套件中的文档演示工具。 PowerPoint Viewer 2003在处理PPT演示文件中内嵌的CString对象时存在整数溢出漏洞，如果用户受骗打开了恶意的PPT文件的话，内嵌的对象可能导致分配很少的缓冲区而拷贝大量数据，触发这个溢出，最终导致可利用的堆溢出。 Microsoft PowerPoint Viewer 2003 临时解决方法： 不要打开或保存从不受信任来源或从受信任来源意外收到的Microsoft Office文件。 厂商补丁：...

Microsoft Office XP SP3 PPT File Buffer Overflow Exploit (ms08-0 1 6)-vulnerability warning-the black bar safety net

Runs calc.exe on the Office XP SP3 with updates 03/11/08. Just for fun... [email protected] milw0rm.com 2008-03-30...

Microsoft Office XP SP3 PPT File Buffer Overflow Exploit (ms08-016)

No description provided by source. Runs calc.exe on Office XP SP3 with updates 03/11/08. Just for fun... http://sebug.net/paper/poc/2008-ms08-016.tgz [email protected]...

Microsoft Office XP SP3 PPT File Buffer Overflow Exploit (ms08-016)

Exploit for unknown platform in category local exploits =================================================================== Microsoft Office XP SP3 PPT File Buffer Overflow Exploit ms08-016 =================================================================== back: http://inj3ct0r.com/sploits/547.r...

Microsoft Office XP SP3 - .PPT File Buffer Overflow (MS08-016)

Microsoft Office XP SP3 - .PPT File Buffer Overflow MS08-016 Runs calc.exe on Office XP SP3 with updates 03/11/08. Just for fun... https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/5320.tgz 2008-ms08-016.tgz [email protected] milw0rm.com 2008-03-30...

FTP Server Zipped .ppt File Uploaded

Binary data 4055.prm...

Moderate: Red Hat Security Advisory: koffice security update

Updated KOffice packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. KOffice is a collection of productivity applications for the K Desktop Environment KDE GUI...

Mandrake Linux Security Advisory : koffice (MDKSA-2006:222)

An integer overflow was discovered in KOffice's filtering code. By tricking a user into opening a specially crafted PPT file, attackers could crash KOffice or possibly execute arbitrary code with the user's privileges. The updated packages have been patched to correct this issue. %NASLMINLEVEL...