Microsoft PowerPoint Viewer TextCharsAtom Record Stack Overflow Remote Code Execution Vulnerability

Bugtraq ID:	38108
Class:	Boundary Condition Error
CVE:	CVE-2010-0034
Remote:	Yes
Local:	No
Published:	Feb 09 2010 12:00AM
Updated:	Feb 09 2010 08:42PM
Credit:	Cody Pierce of Zero Day Initiative
Vulnerable:	Microsoft PowerPoint 2003 SP3 + Microsoft Office 2003 SP3 Microsoft PowerPoint 2003 SP2 + Microsoft Office 2003 SP2 Microsoft PowerPoint 2003 SP1 + Microsoft Office 2003 SP1 Microsoft PowerPoint 2003 0 + Microsoft Office 2003 0 Microsoft PowerPoint 2003 0
Not Vulnerable:

Microsoft PowerPoint Viewer TextCharsAtom Record Stack Overflow Remote Code Execution Vulnerability

Microsoft PowerPoint Viewer is prone to a remote code-execution vulnerability.

An attacker can exploit this issue by enticing an unsuspecting user to open a malicious PowerPoint file.

Successful exploits would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Microsoft PowerPoint Viewer TextCharsAtom Record Stack Overflow Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft PowerPoint Viewer TextCharsAtom Record Stack Overflow Remote Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Microsoft PowerPoint 2003 SP3

• Microsoft Security Update for Microsoft Office PowerPoint 2003 (KB976881)
  http://www.microsoft.com/downloads/details.aspx?familyid=2291ae24-fa39 -4ad8-a7d0-12726b68ad96

Microsoft PowerPoint Viewer TextCharsAtom Record Stack Overflow Remote Code Execution Vulnerability

References:

• Microsoft PowerPoint Homepage (Microsoft)
  
• TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Executi (ZDI Disclosures )
  
• Microsoft Security Bulletin MS10-004 (Microsoft)
  
• TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Executi (TippingPoint DV Labs)