----------------------------------------------------------------------

Secunia is pleased to announce the release of the annual Secunia
report for 2008.

Highlights from the 2008 report:
 * Vulnerability Research
 * Software Inspection Results
 * Secunia Research Highlights
 * Secunia Advisory Statistics

Request the full 2008 Report here:
http://secunia.com/advisories/try_vi/request_2008_report/

Stay Secure,

Secunia


----------------------------------------------------------------------

TITLE:
PowerPoint Unspecified Code Execution Vulnerability

SECUNIA ADVISORY ID:
SA34572

VERIFY ADVISORY:
http://secunia.com/advisories/34572/

DESCRIPTION:
A vulnerability has been reported in Microsoft PowerPoint, which can
be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error that may
result in access to an invalid object in memory when parsing a
specially crafted PowerPoint file.

Successful exploitation allows execution of arbitrary code.

NOTE: According to Microsoft, the vulnerability is currently being
actively exploited.

SOLUTION:
Open trusted Office documents only.

If opening untrusted documents, use the Microsoft Office Isolated
Conversion Environment (MOICE).

PROVIDED AND/OR DISCOVERED BY:
Reported as a 0-day.

ORIGINAL ADVISORY:
Microsoft:
http://www.microsoft.com/technet/security/advisory/969136.mspx

OTHER REFERENCES:
Microsoft:
http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx
http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx
http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------