Signature Detail

HTTP: Microsoft Powerpoint Unknown Animation Node Remote Code Execution

This signature detects attempts to exploit a known vulnerability in Microsoft PowerPoint. A successful attack can result in arbitrary code execution on the user's computer.

Extended Description

Microsoft PowerPoint is prone to a remote heap-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code with user-level privileges, facilitating the complete compromise of an affected computer. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Microsoft office_2003 SP3
• Microsoft office_2004_for_mac
• Microsoft office_xp SP3
• Microsoft powerpoint_2002 SP1
• Microsoft powerpoint_2002 SP2
• Microsoft powerpoint_2002 SP3
• Microsoft powerpoint_2002
• Microsoft powerpoint_2003 SP1
• Microsoft powerpoint_2003 SP2
• Microsoft powerpoint_2003 SP3
• Microsoft powerpoint_2003
• Microsoft powerpoint_2004_for_mac
• Microsoft powerpoint_viewer SP2

References

• BugTraq: 44628
• CVE: CVE-2010-2573