Friday, April 3, 2009

Vulnerability In Microsoft Office PowerPoint

Microsoft has released an advisory of a vulnerability in Microsoft Office PowerPoint that could allow remote code execution if a user opens a specially crafted PowerPoint file. Microsoft states in the advisory that the attacks they are currently aware of are limited and targeted ones.

Affected (supported) software versions are:
- Microsoft Office PowerPoint 2000 Service Pack 3
- Microsoft Office PowerPoint 2002 Service Pack 3
- Microsoft Office PowerPoint 2003 Service Pack 3
- Microsoft Office 2004 for Mac

Microsoft Office 2007 and Microsoft Office for Mac 2008 are not affected by this vulnerability.

Microsoft recommends Office users to avoid opening or saving Office files that are received from un-trusted sources or that are received unexpectedly from trusted sources.

About other workarounds can be read from the advisory.

No comments: