Microsoft PowerPoint OEPlaceholderAtom记录释放后使用漏洞（MS10-004）

🗓️ 20 Feb 2010 00:00:00Reported by RootType

Microsoft PowerPoint OEPlaceholderAtom记录释放后使用漏洞（MS10-004）BUGTRAQ ID: 38104 CVE ID: CVE-2010-0032. PowerPoint处理特制PPT文件msofbtClientData容器中的OEPlaceholderAtom记录时存在释放后使用漏洞，可能导致执行任意代码。临时解决方法包括使用文件阻断策略和Microsoft Office隔离转换环境（MOICE）。Microsoft已发布安全公告（MS10-004）和相应补丁

Reporter	Title	Published	Views	Family All 12
Check Point Advisories	Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing (MS10-004; CVE-2010-0031; CVE-2010-0032)	9 Feb 201000:00	–	checkpoint_advisories
Check Point Advisories	Microsoft PowerPoint OEPlaceholderAtom Arbitrary Array Indexing - Ver2 (CVE-2010-0032)	18 May 201500:00	–	checkpoint_advisories
CVE	CVE-2010-0032	10 Feb 201018:00	–	cve
Cvelist	CVE-2010-0032	10 Feb 201018:00	–	cvelist
NVD	CVE-2010-0032	10 Feb 201018:30	–	nvd
OpenVAS	Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (975416)	10 Feb 201000:00	–	openvas
OpenVAS	Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (975416)	10 Feb 201000:00	–	openvas
Prion	Design/Logic Flaw	10 Feb 201018:30	–	prion
securityvulns	Microsoft Security Bulletin MS10-004 - Important Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (975416)	10 Feb 201000:00	–	securityvulns
securityvulns	iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Use-After-Free Vulnerability	12 Feb 201000:00	–	securityvulns