CVE-2008-0120 Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to....
HighCVSS 9.3
EPSS 31.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to handling of CString objects, aka "Memory Allocation Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office powerpoint viewer | = 2003 | No fix listed |
References
- 20080812 Microsoft PowerPoint Viewer 2003 Cstring Integer Overflow Vulnerability third-party-advisory
- HPSBST02360 vendor-advisory
- 31453 patch third-party-advisory vendor-advisory
- 30552 vdb-entry
- 1020676 vdb-entry
- TA08-225A third-party-advisory us-government-resource
- ADV-2008-2355 vdb-entry
- MS08-051 vendor-advisory
- oval:org.mitre.oval:def:5768 signature vdb-entry