Trend Micro Security

Microsoft PowerPoint Unspecified Code Execution Vulnerability

2011年3月4日
  危険度: : 緊急
  CVE識別番号: CVE-2009-0556

  概要

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

  トレンドマイクロの対策

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  影響を受けるソフトウェア

  • Microsoft Powerpoint 2003
  • Microsoft Powerpoint 2002
  • Microsoft Powerpoint 2000
  • Microsoft Office Powerpoint 2004