Microsoft PowerPoint Buffer Overflow Vulnerability

Bugtraq ID:	2297
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Jan 22 2001 12:00AM
Updated:	Jan 22 2001 12:00AM
Credit:	Posted in a Microsoft Security Bulletin (MS01-002) on Jan 22, 2001.
Vulnerable:	Microsoft PowerPoint 2000 + Microsoft Office 2000 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3
Not Vulnerable:

Microsoft PowerPoint Buffer Overflow Vulnerability

Microsoft PowerPoint is subject to a buffer overflow condition. If malicious code is embedded within a PowerPoint document, accessing the file in question could cause the buffer to be overwritten with the embedded arbitrary code.

Microsoft PowerPoint Buffer Overflow Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft PowerPoint Buffer Overflow Vulnerability

Solution:
Microsoft has released a patch which addresses this issue:

http://officeupdate.microsoft.com/2000/downloadDetails/O2kSR1DDL.htm


Microsoft PowerPoint 2000

• Microsoft o2ksr1a
  http://download.microsoft.com/download/office2000pro/SP/SR-1a/WIN98/EN -US/o2ksr1a.exe

Microsoft PowerPoint Buffer Overflow Vulnerability

References:

• Microsoft Security Bulletin (MS01-002) (Microsoft)
  
• Microsoft Security Bulletin (MS01-002):Frequently Asked Questions (Microsoft)
  
• Office 2000 Service Release 1a (SR-1a) Update - Download Details for English (Microsoft)