Update Protection against Microsoft PowerPoint Legacy File Parsing Memory Corruption Vulnerability (MS10-088)
| Check Point Reference: | CPAI-2010-319 | |
| Date Published: | ||
| Severity: | ||
| Last Updated: | ||
| Source: | Microsoft Security Bulletin MS10-088 | |
| Industry Reference(s): | CVE-2010-2572 | |
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Microsoft PowerPoint 2002 SP3 Microsoft PowerPoint 2003 SP3 Microsoft Office 2004 for Mac Microsoft PowerPoint Viewer SP2 | ||
| Vulnerability Description A remote code execution vulnerability has been identified in Microsoft PowerPoint. Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. |
||
|
Update/Patch Available Apply patches: Microsoft Security Bulletin MS10-088 |
|
|
Vulnerability Details The vulnerability is due to an integer underflow in Microsoft PowerPoint that fails to properly parse specially crafted PowerPoint 95 file. A remote attacker could trigger this flaw by convincing a victim to open a malicious PowerPoint file that will lead to a heap corruption. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system. |
Protection Overview
This protection will detect and block the transferring of malformed PowerPoint files over HTTP.
In order for the protection to be activated, update your Security Gateway/VPN-1 product to the latest IPS/SmartDefense update. For information on how to update IPS/SmartDefense, go to SBP-2006-05, Protection tab, and select the version of your choice.
To configure the defense, select your product from the list below and follow the related protection steps.