Description
Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka "Heap Corruption Vulnerability."
References
- oval:org.mitre.oval:def:5961 vdb-entry signature
- 32428 third-party-advisory
- ADV-2009-1290 vdb-entry
- 20090512 ZDI-09-020: Microsoft Office PowerPoint Notes Container Heap Overflow Vulnerability mailing-list
- MS09-017 vendor-advisory
- 20090512 Microsoft PowerPoint Notes Container Heap Corruption Vulnerability third-party-advisory
- 1022205 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-09-020/
- TA09-132A third-party-advisory
- 34840 vdb-entry