Oval Definition:	oval:org.mitre.oval:def:12624
Revision Date: 2014-07-07 Version: 22 Title: Floating Point Techno-color Time Bandit RCE Vulnerability Description: Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate TimeColorBehaviorContainer Floating Point records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document containing an invalid record, aka "Floating Point Techno-color Time Bandit RCE Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2011-0655 Platform(s): Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft Office Compatibility Pack Microsoft Office PowerPoint 2007 Microsoft Office PowerPoint 2010 Microsoft PowerPoint Viewer Microsoft PowerPoint Viewer 2007 Microsoft PowerPoint Web App Definition Synopsis Microsoft PowerPoint 2007 SP2 Microsoft PowerPoint 2007 Service Pack 2 is installed AND ppcore.dll version is less than 12.0.6550.5000 OR Microsoft PowerPoint 2010 Microsoft PowerPoint 2010 is installed AND ppcore.dll version is less than 14.0.5136.5003 OR Microsoft Office Compatibility Pack Microsoft Office Compatibility Pack is installed AND ppcnv.dll version is less than 12.0.6550.5000 OR Microsoft PowerPoint Viewer 2007 Microsoft PowerPoint Viewer 2007 is installed AND PptView.exe version is less than 12.0.6550.5000 OR Microsoft PowerPoint Viewer Microsoft PowerPoint Viewer 2010 is installed AND PptView.exe version is less than 14.0.5136.5003
BACK