Vulnerability Note VU#627331
Microsoft Office PowerPoint code execution vulnerability
Microsoft PowerPoint contains a vulnerability. If exploited, this vulnerability could allow an attacker to execute code.
Microsoft Powerpoint is a component of Microsoft Office. Per Microsoft Security Advisory 969136:
The vulnerability is caused when Microsoft Office PowerPoint accesses an invalid object in memory when parsing a specially crafted PowerPoint file. This creates a condition that allows the attacker to execute arbitrary code.
The advisory also states that Microsoft Office 2000, Microsoft Office XP, Microsoft Office 2003, and Microsoft Office 2004 for Mac are affected.
A remote attacker may be able to execute code with the privileges of the user running PowerPoint.
We are currently unaware of solution to this problem. Until updates are available, users are encouraged to use the below workarounds.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Microsoft Corporation||Affected||-||03 Apr 2009|
CVSS Metrics (Learn More)
Information from Microsoft Security Advisory 969136 was used in this report.
This document was written by Ryan Giobbi.
- CVE IDs: CVE-2009-0556
- Date Public: 02 Apr 2009
- Date First Published: 03 Apr 2009
- Date Last Updated: 03 Apr 2009
- Severity Metric: 9.28
- Document Revision: 11
If you have feedback, comments, or additional information about this vulnerability, please send us email.