Description
Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array indexing" and memory corruption, aka "PP7 Memory Corruption Vulnerability."
References
- oval:org.mitre.oval:def:5526 vdb-entry signature
- http://www.vupen.com/exploits/Microsoft_PowerPoint_Array_Indexing_Code_Execution_Exploit_MS09_017_1290125.php
- 32428 third-party-advisory
- ADV-2009-1290 vdb-entry
- MS09-017 vendor-advisory
- 54388 vdb-entry
- 1022205 vdb-entry
- TA09-132A third-party-advisory
- 34880 vdb-entry