جزئیات آسیب‌پذیری

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

• http://www.zerodayinitiative.com/advisories/ZDI-09-019 x_refsource_MISC
• http://blogs.technet.com/mmpc/archive/2009/04/02/new-0-day-exploits-using-powerpoint-files.aspx x_refsource_CONFIRM
• http://www.vupen.com/english/advisories/2009/1290 vdb-entryx_refsource_VUPEN
• http://osvdb.org/53182 vdb-entryx_refsource_OSVDB
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 vendor-advisoryx_refsource_MS
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49632 vdb-entryx_refsource_XF
• http://www.securityfocus.com/bid/34351 vdb-entryx_refsource_BID
• http://www.vupen.com/english/advisories/2009/0915 vdb-entryx_refsource_VUPEN
• http://blogs.technet.com/msrc/archive/2009/04/02/microsoft-security-advisory-969136.aspx x_refsource_CONFIRM
• http://blogs.technet.com/srd/archive/2009/04/02/investigating-the-new-powerpoint-issue.aspx x_refsource_CONFIRM
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6279 vdb-entrysignaturex_refsource_OVAL
• http://secunia.com/advisories/34572 third-party-advisoryx_refsource_SECUNIA
• http://www.securitytracker.com/id?1021967 vdb-entryx_refsource_SECTRACK
• http://www.us-cert.gov/cas/techalerts/TA09-132A.html third-party-advisoryx_refsource_CERT
• http://www.microsoft.com/technet/security/advisory/969136.mspx x_refsource_CONFIRM
• http://www.kb.cert.org/vuls/id/627331 third-party-advisoryx_refsource_CERT-VN
• http://www.securityfocus.com/archive/1/503453/100/0/threaded mailing-listx_refsource_BUGTRAQ
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6204 vdb-entrysignaturex_refsource_OVAL
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-0556 government-resource