Oval Definition:oval:org.mitre.oval:def:14581
Revision Date:2014-06-30Version:15
Title:OfficeArt Shape RCE Vulnerability
Description:Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an invalid OfficeArt record in a PowerPoint document, aka "OfficeArt Shape RCE Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2011-3413
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Office Compatibility Pack
Microsoft Office PowerPoint 2007
Microsoft Office PowerPoint Viewer 2007
Definition Synopsis
  • Microsoft PowerPoint 2007
  • Microsoft PowerPoint 2007 is installed
  • AND ppcore.dll version is less than 12.0.6654.5000
  • OR Microsoft Office Compatibility Pack
  • Microsoft Office Compatibility Pack is installed
  • AND ppcnv.dll version is less than 12.0.6654.5000
  • OR Microsoft PowerPoint Viewer 2007
  • Microsoft PowerPoint Viewer 2007 is installed
  • AND PptView.exe version is less than 12.0.6654.5000
  • BACK