----------------------------------------------------------------------

Hardcore Disassembler / Reverse Engineer Wanted!

Want to work with IDA and BinDiff?
Want to write PoC's and Exploits?

Your nationality is not important.
We will get you a work permit, find an apartment, and offer a
relocation compensation package.

http://secunia.com/hardcore_disassembler_and_reverse_engineer/

----------------------------------------------------------------------

TITLE:
Microsoft PowerPoint Memory Corruption Vulnerability

SECUNIA ADVISORY ID:
SA21061

VERIFY ADVISORY:
http://secunia.com/advisories/21061/

CRITICAL:
Highly critical

IMPACT:
DoS, System access

WHERE:
>From remote

SOFTWARE:
Microsoft Office 2000
http://secunia.com/product/24/
Microsoft Office 2003 Professional Edition
http://secunia.com/product/2276/
Microsoft Office 2003 Small Business Edition
http://secunia.com/product/2277/
Microsoft Office 2003 Standard Edition
http://secunia.com/product/2275/
Microsoft Office 2003 Student and Teacher Edition
http://secunia.com/product/2278/
Microsoft Office PowerPoint 2003 Viewer
http://secunia.com/product/4033/
Microsoft Office XP
http://secunia.com/product/23/
Microsoft PowerPoint 2000
http://secunia.com/product/3052/
Microsoft PowerPoint 2002
http://secunia.com/product/2223/
Microsoft Powerpoint 2003
http://secunia.com/product/5274/

DESCRIPTION:
naveed has discovered a vulnerability in Microsoft PowerPoint, which
potentially can be exploited by malicious people to compromise a
user's system.

The vulnerability is caused due to the application using data taken
directly from a PowerPoint presentation file as a pointer when saving
or closing the presentation. This can be exploited to corrupt memory
and manipulate the program flow in various ways.

Successful exploitation crashes the application and arbitrary code
execution may potentially also be possible, but has not currently
been proven.

The vulnerability has been confirmed on Windows XP SP2 with a fully
patched PowerPoint 2003. Other versions may also be affected.

NOTE: Two other issues, which can be exploited to crash the
application, have also been reported.

SOLUTION:
Do not open untrusted Office documents.

PROVIDED AND/OR DISCOVERED BY:
naveed

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------