CVE-2009-0556Microsoft Office PowerPoint Code Injection Vulnerability

Beschreibung

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• http://www.zerodayinitiative.com/advisories/ZDI-09-019 Third Party Advisory
• http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx Vendor Advisory
• ADV-2009-1290 vdb-entryBroken Link
• 53182 vdb-entryBroken Link
• MS09-017 vendor-advisoryVendor Advisory
• powerpoint-unspecified-code-execution(49632) vdb-entryThird Party Advisory
• 34351 vdb-entryBroken Link
• ADV-2009-0915 vdb-entryVendor Advisory
• http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx Vendor Advisory
• http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx Vendor Advisory
• oval:org.mitre.oval:def:6279 vdb-entrysignatureBroken Link
• 34572 third-party-advisoryVendor Advisory
• 1021967 vdb-entryBroken Link
• TA09-132A third-party-advisoryUS Government Resource
• http://www.microsoft.com/technet/security/advisory/969136.mspx PatchVendor Advisory
• VU#627331 third-party-advisoryUS Government Resource
• 20090512 ZDI-09-019: Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Vulnerability mailing-listBroken Link
• oval:org.mitre.oval:def:6204 vdb-entrysignatureBroken Link
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0556 US Government Resource