CVE-2008-0120: Integer Overflow

Published Aug 13, 2008

Updated

Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint file with a malformed picture index that triggers memory corruption, related to handling of CString objects, aka "Memory Allocation Vulnerability."

Affected Software

1 affected component

Microsoft Office PowerPoint Viewer=2003

Remediation

Patch Available

http://secunia.com/advisories/31453

Event History

Aug 13, 2008

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0120?

CVE-2008-0120 has a high severity rating due to its potential to allow remote code execution.

How do I fix CVE-2008-0120?

The recommended fix for CVE-2008-0120 is to update to a newer version of Microsoft PowerPoint Viewer that addresses this vulnerability.

What types of attacks can exploit CVE-2008-0120?

CVE-2008-0120 can be exploited through specially crafted PowerPoint files that trigger memory corruption.

Who is affected by CVE-2008-0120?

Users of Microsoft PowerPoint Viewer 2003 are primarily affected by CVE-2008-0120.

What are the conditions required for CVE-2008-0120 to be exploited?

An attacker needs to send a malformed PowerPoint file to the victim, who must open it using PowerPoint Viewer 2003.