CVE-2011-0976 Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats...
HighCVSS 9.3
EPSS 25.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art containers that have invalid records, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PowerPoint document with a container that triggers certain access to an uninitialized object, aka "OfficeArt Atom RCE Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft powerpoint | = 2007 | No fix listed |
References
- dvlabs.tippingpoint.com
- 43213 third-party-advisory
- 20110207 ZDI-11-044: Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability mailing-list
- 1025340 vdb-entry
- TA11-102A third-party-advisory us-government-resource
- ADV-2011-0941 vdb-entry
- zerodayinitiative.com
- MS11-022 vendor-advisory
- oval:org.mitre.oval:def:11978 signature vdb-entry