Oval Definition:oval:org.mitre.oval:def:11978
Revision Date:2014-06-30Version:17
Title:OfficeArt Atom RCE Vulnerability
Description:Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art containers that have invalid records, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PowerPoint document with a container that triggers certain access to an uninitialized object, aka "OfficeArt Atom RCE Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2011-0976
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Office Compatibility Pack
Microsoft Office PowerPoint 2002
Microsoft Office PowerPoint 2003
Microsoft Office PowerPoint 2007
Microsoft PowerPoint Viewer
Microsoft PowerPoint Viewer 2007
Definition Synopsis
  • Microsoft PowerPoint 2002
  • Microsoft PowerPoint 2002 is installed
  • AND Powerpnt.exe version is less than 10.0.6868.0
  • OR Microsoft PowerPoint 2003
  • Microsoft PowerPoint 2003 is installed
  • AND Powerpnt.exe version is less than 11.0.8334.0
  • OR Microsoft PowerPoint 2007
  • Microsoft PowerPoint 2007 is installed
  • AND ppcore.dll version is less than 12.0.6550.5000
  • OR Microsoft Office Compatibility Pack
  • Microsoft Office Compatibility Pack is installed
  • AND ppcnv.dll version is less than 12.0.6550.5000
  • OR Microsoft PowerPoint Viewer 2007
  • Microsoft PowerPoint Viewer 2007 is installed
  • AND PptView.exe version is less than 12.0.6550.5000
  • BACK