(MS11-022) Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2489283)

  Severity: HIGH
  CVE Identifier: CVE-2011-0655,CVE-2011-0976
  Advisory Date: JUN 17, 2011

  DESCRIPTION

This security update addresses vulnerabilities in Microsoft PowerPoint that could allow remote code execution. A remote malicious user could have the same user rights as the local user if a user opens a specially crafted PowerPoint file.

  TREND MICRO PROTECTION INFORMATION

For information on patches specific to the affected software, please proceed to the Microsoft Web page.

  AFFECTED SOFTWARE AND VERSION

  • Microsoft Office XP Service Pack 3
  • Microsoft Office 2003 Service Pack 3
  • Microsoft Office 2007 Service Pack 2
  • Microsoft Office 2010 (32-bit editions)
  • Microsoft Office 2010 (64-bit editions)
  • Microsoft Office 2004 for Mac
  • Microsoft Office 2008 for Mac
  • Microsoft Office for Mac 2011
  • Open XML File Format Converter for Mac
  • Microsoft Office Compatibility Pack for Word
  • Excel
  • and PowerPoint 2007 File Formats Service Pack 2
  • Microsoft PowerPoint Viewer 2007 Service Pack 2
  • Microsoft PowerPoint Viewer
  • Microsoft Office Web Apps