Microsoft PowerPoint Presentation Handling Client-Side Memory Corruption Vulnerability
Technical Description



A vulnerability has been identified in Microsoft PowerPoint, whichcould be exploited by attackers to take complete control of an affectedsystem. This flaw is due to a memory corruption error in the "mso.dll"library when handling a malformed presentation, which could beexploited by attackers to execute arbitrary commands by tricking a userinto opening a specially crafted ".ppt" file.



Note : This zero-day vulnerability is currently being exploited in the wild by Trojan.PPDropper.B.



Affected Products



Microsoft PowerPoint 2000

Microsoft PowerPoint 2002

Microsoft PowerPoint 2003

Microsoft Office 2000

Microsoft Office XP

Microsoft Office 2003
더보기

댓글,