Signature Detail

HTTP: Microsoft Powerpoint Long Filename Overflow

This signature detects attempts to exploit a known vulnerability against Microsoft PowerPoint. An attacker can trick a victim into visiting a hostile Web site, which if successful, can cause a buffer overflow on the victim's machine; with the result that the attacker can gain the same user rights as the local victim user.

Extended Description

Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing a victim to open a malicious PowerPoint file. Successful exploits would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Affected Products

• Microsoft PowerPoint 2002 SP1
• Microsoft PowerPoint 2002 SP2
• Microsoft PowerPoint 2002 SP3
• Microsoft PowerPoint 2002

References

• BugTraq: 38099
• CVE: CVE-2010-0029
• URL: http://www.microsoft.com/technet/security/Bulletin/MS10-004.mspx