HTTP: Microsoft Powerpoint Long Filename Overflow

This signature detects attempts to exploit a known vulnerability against Microsoft PowerPoint. An attacker can trick a victim into visiting a hostile Web site, which if successful, can cause a buffer overflow on the victim's machine; with the result that the attacker can gain the same user rights as the local victim user.

Extended Description

Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a malicious PowerPoint file. Successful exploits would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Affected Products

Microsoft powerpoint_2002

References

BugTraq: 38099

CVE: CVE-2010-0029

URL: http://www.microsoft.com/technet/security/Bulletin/MS10-004.mspx

Short Name

HTTP:STC:PPT-LONGNAME

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Microsoft Powerpoint Long Filename Overflow

Extended Description

Affected Products

References

Found a potential security threat?