HTTP: Microsoft Office PowerPoint File Path Handling Buffer Overflow

A stack buffer overflow vulnerability exists in Microsoft Office PowerPoint. The vulnerability is due to the way that the vulnerable application handles specially crafted file paths. This vulnerability may be exploited by remote unauthenticated attackers by enticing a user to open a maliciously crafted file. In attack scenarios where code execution is successful the behaviour of the target machine is completely dependent on the intention of the injected code, which will run in the security context of the currently logged in user. In cases where code execution is not successful the affected product may terminate abnormally.

Extended Description

Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a malicious PowerPoint file. Successful exploits would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Affected Products

Microsoft powerpoint_2002

References

BugTraq: 38099

CVE: CVE-2010-0029

Short Name

HTTP:STC:PPT-CRAFTED-PATH

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office PowerPoint File Path Handling Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?