Description
Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with unspecified "layout information" that triggers a heap-based buffer overflow.
References
- 54961 vdb-entry
- 1022369 vdb-entry
- ms-powerpoint-freelance-bo(51034) vdb-entry
- http://secunia.com/secunia_research/2009-29/
- 20090610 Secunia Research: Microsoft PowerPoint Freelance Layout Parsing Vulnerability mailing-list
- 35275 vdb-entry
- 35184 third-party-advisory