Check Point Advisories

Microsoft PowerPoint .dll Insecure Library Loading (MS11-073; CVE-2011-1980)

Check Point Reference:	CPAI-2011-121
Date Published:	13 Sep 2011
Severity:	Critical
Last Updated:	Saturday 01 January, 2011
Source:	Microsoft Security Bulletin MS11-073
Industry Reference:	CVE-2011-1980
Protection Provided by:
Who is Vulnerable?	Microsoft Office 2003 Service Pack 3 Microsoft Office 2007 Service Pack 2 Microsoft Office 2010 (32-bit editions) Microsoft Office 2010 Service Pack 1 (32-bit editions) Microsoft Office 2010 (64-bit editions) Microsoft Office 2010 Service Pack 1 (64-bit editions)
Vulnerability Description	The vulnerability is due to insecure library loading issue in Microsoft PowerPoint. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted PowerPoint file. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system.
Update/Patch Avaliable	MS11-073
Vulnerability Details	This is a remote code execution vulnerability. The vulnerability is due to insecure library loading issue in Microsoft Power Point. Successful exploitation of this vulnerability may allow execution of arbitrary code on a vulnerable system.