Microsoft Office Powerpoint is prone to an overflow condition. The program fails to properly sanitize user-supplied input when handling file paths, resulting in a stack-based buffer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code on a user's system.

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

• CVE ID: 2010-0029 (see also: NVD)
• Related OSVDB ID: 62236 62237 62238 62240 62241
• Microsoft Knowledge Base Article: 975416
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2010-02/0101.html
• Other Advisory URL: http://secunia.com/secunia_research/2009-28/
• Microsoft Security Bulletin: MS10-004

• Carsten Eiram - Secunia Research