Description
Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art containers that have invalid records, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PowerPoint document with a container that triggers certain access to an uninitialized object, aka "OfficeArt Atom RCE Vulnerability."
References
- MS11-022 vendor-advisory
- TA11-102A third-party-advisory
- oval:org.mitre.oval:def:11978 vdb-entry signature
- 1025340 vdb-entry
- 20110207 ZDI-11-044: Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability mailing-list
- http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-microsoft
- http://zerodayinitiative.com/advisories/ZDI-11-044/
- ADV-2011-0941 vdb-entry
- 43213 third-party-advisory