RETIRED: Microsoft November 2010 Advance Notification Multiple Vulnerabilities

Bugtraq ID:	44649
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Nov 04 2010 12:00AM
Updated:	Apr 19 2013 02:40AM
Credit:	Microsoft
Vulnerable:	Microsoft PowerPoint Viewer SP2 Microsoft PowerPoint 2003 SP3 + Microsoft Office 2003 SP3 Microsoft PowerPoint 2002 SP3 Microsoft Office XP SP3 + Microsoft Excel 2002 SP3 + Microsoft Excel 2002 SP3 + Microsoft FrontPage 2002 SP3 + Microsoft FrontPage 2002 SP3 + Microsoft Outlook 2002 SP3 + Microsoft Outlook 2002 SP3 + Microsoft PowerPoint 2002 SP3 + Microsoft PowerPoint 2002 SP3 + Microsoft Publisher 2002 SP3 + Microsoft Publisher 2002 SP3 Microsoft Office 2011 for Mac 0 Microsoft Office 2010 0 Microsoft Office 2007 SP2 Microsoft Office 2003 SP3
Not Vulnerable:

RETIRED: Microsoft November 2010 Advance Notification Multiple Vulnerabilities

Microsoft has released advance notification that on November 9, 2010, they will be releasing three security bulletins covering 11 vulnerabilities.

The bulletins and their affected components are as follows:

One bulletin rated 'Critical' affecting Office
Two bulletins rated 'Important' affecting Office, PowerPoint, and Forefront Unified Access Gateway

This BID is being retired. The following individual records exist to better document the issues:

42628 Microsoft Office 'pptimpconv.dll' DLL Loading Arbitrary Code Execution Vulnerability
44626 Microsoft PowerPoint 'PP7X32.DLL' (CVE-2010-2572) Remote Heap-Based Buffer Overflow Vulnerability
44628 Microsoft PowerPoint (CVE-2010-2573) Heap Corruption Vulnerability
44631 Microsoft Forefront Unified Access Gateway Spoofing Vulnerability
44632 Microsoft Forefront Unified Access Gateway Web Monitor Cross-Site Scripting Vulnerability
44633 Microsoft Forefront Unified Access Gateway Mobile Portal Cross-Site Scripting Vulnerability
44634 Microsoft Forefront Unified Access Gateway 'Signurl.asp' Cross-Site Scripting Vulnerability
44652 Microsoft Office RTF File Stack Buffer Overflow Vulnerability
44656 Microsoft Office Art Drawing Record Remote Code Execution Vulnerability
44659 Microsoft Office Drawing Exception Handling Remote Code Execution Vulnerability
44660 Microsoft Office Large SPID Read AV Remote Code Execution Vulnerability

RETIRED: Microsoft November 2010 Advance Notification Multiple Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Microsoft November 2010 Advance Notification Multiple Vulnerabilities

Solution:
Microsoft plans to release fixes to address these issues on November 9, 2010.

Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Microsoft November 2010 Advance Notification Multiple Vulnerabilities

References:

• Advance Notification Service for November 2010 Bulletins (Microsoft)
  
• Microsoft Homepage (Microsoft)
  
• Microsoft Security Bulletin Advance Notification for November 2010 (Microsoft)