SMB: Microsoft Office PowerPoint Insecure Library Loading

This signature detects attempts to exploit a known vulnerability against Microsoft Office. A successful attack can lead to arbitrary code execution.

Extended Description

Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability."

Affected Products

Microsoft powerpoint

References

CVE: CVE-2011-3396

URL: http://technet.microsoft.com/en-us/security/bulletin/ms11-094

Short Name

SMB:FILE:MSOFF-PWRPT-INSC-LIBLD

Severity

Critical

Recommended

False

Recommended Action

Drop

SMB: Microsoft Office PowerPoint Insecure Library Loading

Extended Description

Affected Products

References

Found a potential security threat?