Signature Detail

HTTP: Microsoft PowerPoint Viewer TextBytesAtom Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft PowerPoint Viewer. An attacker can create a malicious Web site containing Web pages with dangerous Powerpoint files, which if accessed by a victim, allows the attacker to upload and download files from the victim's computer, potentially resulting in arbitrary program execution.

Extended Description

Microsoft PowerPoint Viewer is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious PowerPoint file. Successful exploits would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Affected Products

• Microsoft PowerPoint 2003 SP1
• Microsoft PowerPoint 2003 SP2
• Microsoft PowerPoint 2003 SP3
• Microsoft PowerPoint 2003

References

• BugTraq: 38108
• BugTraq: 38107
• CVE: CVE-2010-0034
• CVE: CVE-2010-0033
• URL: http://www.snoop-security.com/blog/index.php/2010/03/exploiting-ms10-004-ppt-viewer/