Intrusion PreventionMS.PPT.WMF.Memory.Corruption
Description
This indicates an attack attempt to exploit a Memory Corruption vulnerability in Microsoft Powerpoint.
The vulnerability is caused by an error that occurs when the vulnerable software handles a malicious "PPT" file. A remote attacker can exploit this to execute arbitrary code via a crafted "PPT" file.
Affected Products
Microsoft Office XP Service Pack 3
Microsoft Office 2003 Service Pack 3
Microsoft Office 2007 Service Pack 2
Microsoft Office 2004 for Mac
Microsoft Office 2008 for Mac
Open XML File Format Converter for Mac
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Microsoft Office XP Service Pack 3
http://www.microsoft.com/downloads/details.aspx?familyid=2e8a30ac-bcfe-4535-8ceb-723c25b43d5f
Microsoft Office 2003 Service Pack 3
http://www.microsoft.com/downloads/details.aspx?familyid=fc1cfcac-64cc-484a-97f2-3dcfe84cfdcd
Microsoft Office 2007 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=9a181739-709a-4c0d-a97f-f9891c45c04c
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2
http://www.microsoft.com/downloads/details.aspx?FamilyID=5be09069-1cac-4b1e-ac94-4fb7024fb4ac
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29215 |
| Created | Sep 29, 2011 |
| Updated | Apr 23, 2014 |
| Risk |
|
| CVE ID | CVE-2011-1270 |
| Exploit Prediction Score | 15.76% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |