Microsoft Office PowerPoint Multiple Vulnerabilities
Last Update Date:
13 Apr 2011 18:11
Release Date:
13 Apr 2011
5287
Views
RISK: Medium Risk
TYPE: Clients - Productivity Products
A remote code execution vulnerability exists in the way that Microsoft PowerPoint handles specially crafted PowerPoint files. An attacker could exploit the vulnerability by creating a specially crafted PowerPoint file that could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site.
- Floating Point Techno-color Time Bandit RCE Vulnerability
- Persist Directory RCE Vulnerability
- OfficeArt Atom RCE Vulnerability
Impact
- Remote Code Execution
System / Technologies affected
- Microsoft PowerPoint 2002
- Microsoft PowerPoint 2003
- Microsoft PowerPoint 2007
- Microsoft PowerPoint 2010
- Microsoft Office XP
- Microsoft Office 2003
- Microsoft Office 2007
- Microsoft Office 2010
- Microsoft Office 2004 for Mac
- Microsoft Office 2008 for Mac
- Microsoft Office for Mac 2011
- Open XML File Format Converter for Mac
- Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
- Microsoft PowerPoint Viewer
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
http://www.microsoft.com/technet/security/bulletin/MS11-022.mspx#ERC
Vulnerability Identifier
Source
Related Link
Share with