Vulnerabilities

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 memory... (PC1-2009-1292)

Vulnerability chart	Risk level Low Medium High Extreme Severe Warning: security vulnerability level = severe 24 vulnerabilities(-y) found between 15 February, 2006 and 10 February, 2010. Microsoft PowerPoint being a presentation program which is developed by... more See also: Powerpoint, Microsoft PowerPoint 2000, Microsoft Office PowerPoint 124 files found: mplayer.exe, powerpnt.exe, autoconv.exe, VSETUP.EXE, DECOMP.EXE, acmsetup.exe, graflink.exe, _mssetup.exe, preview.exe, msinfo.exe, graph5.exe, pptview.exe, orgchart.exe, ccard100.exe, artgalry.exe... more Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 contain a vulnerability.
Unknown vulnerability Yes, patch is available Patch is easy to implement

Description:	By using this type of vulnerability, remote attackers are enabled to execute arbitrary code through crafted sound data in a file using a PowerPoint 95 native file format. It results in memory corruption, aka "PP7 Memory Corruption Vulnerability," not similar to vulnerability CVE-2009-1128.
Impact:	With the help of this vulnerability, remote attackers obtains administrator access. Also, they are permitted to full confidentiality, integrity, and availability violation. Moreover, this vulnerability enables to reveal information without any authorization. Finally, it lets to break up a service.
Solution:	We recommend users to check for the latest versions and updates of the software product and upgrade their systems.
References:	http://www.microsoft.com/technet/security/Bulletin/MS09-017.mspx

CVSS Severity		CVSS Version 2 Metrics:
CVSS v2 Base Score:	9.3 (HIGH)	Access Vector:	N/A
Impact Subscore:	10.0	Access Complexity:	Medium
Exploitability Subscore:	8.6	Authentication:	Not required to exploit
		Impact Type:	Provides administrator access, Allows complete confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service