Free hard drive encryption - Download a trial of SafeGuard Easy
Vulnerability: (969136) Vulnerability in Microsoft Office PowerPoint Could Allow Remote Code Execution
Back to Latest vulnerabilities homepage
Click any highlighted term for further explanation.
| Details | |||||
|---|---|---|---|---|---|
| Vulnerability name/brief description | Vulnerability in Microsoft Office PowerPoint Could Allow Remote Code Execution (969136) | ||||
| CVE/CAN name | CVE-2009-0556 | ||||
| Vendor threat level | Critical | ||||
| SophosLabs threat level | High | ||||
| Solution | At the time of writing this analysis a security update was not available from the vendor. | ||||
| Vendor description | Microsoft is investigating new reports of a vulnerability in Microsoft Office PowerPoint that could allow remote code execution if a user opens a specially crafted PowerPoint file. At this time, we are aware only of limited and targeted attacks that attempt to use this vulnerability.
| ||||
| SophosLabs comments | The vulnerability may result in remote code execution. It can be exploited by enticing the user to open specially crafted PowerPoint files. The vulnerability has been assigned a high threat level. | ||||
| SophosLabs testing result | N/A | ||||
| Currently known exploits | SophosLabs has received several samples and detection for them has been published as Troj/ExpPPT-A | ||||
| First sample seen | N/A | ||||
| Discovery date | 02 April 2009 | ||||
| Affected software |
| ||||
| References | http://www.microsoft.com/technet/security/advisory/969136.mspx | ||||
| Credits | |||||
| Revisions | 03 April 2009 - initial analysis written |
Explanation of terms
Vulnerability Name/Brief Description:
Vendor identifier plus a brief description of the type of attack.
CVE/CAN Name:
Currently assigned CVE name. If a CVE name doesn't exist the CAN name will be used until a CVE has been assigned.
Vendor Threat Level:
Threat level assigned by the vendor
SophosLabs Threat Level:
Threat level assigned by SophosLabs
- LOW RISK - There is little chance of this vulnerability being actively exploited by malware.
- MEDIUM RISK - There is a possibility of this vulnerability being actively exploited by malware.
- HIGH RISK - There is a strong possibility of this vulnerability being actively exploited by malware.
- CRITICAL RISK - This vulnerability will almost certainly be actively exploited by malware.
Solution:
Vendor-supplied Patch identifier and recommended solution, or workaround if applicable.
Vendor Description:
Summary of the cause and potential effect of the vulnerability provided by the vendor.
SophosLabs Comments:
SophosLabs' opinions and observations of the vulnerability in question.
SophosLabs Testing Result:
Details of completed lab testing, if applicable. Please note that the lab test environment may differ significantly from user environments.
Currently Known Exploits:
List of identities for known exploits, if applicable.
First Sample Seen:
Date of the first sample seen by SophosLabs.
Discovery Date:
Date of the earliest known publically disclosed advisory.
Affected Software:
Vulnerable platforms and software versions.
If you need more information or guidance, then please contact technical support.
- Article ID: 56358
- Created: 3 Apr 2009
- Last updated: 3 Apr 2009
Free hard drive encryption
- Protect sensitive data from unauthorized use
- Encrypt data, hard drives and removable media
- Work uninterrupted with encryption on demand
