MS.PowerPoint.PSTExEmbed.Code.Execution

Release Date May 14, 2009
Severity critical
Impact System compromise
Description This indicates a possible attack against a vulnerability in the PowerPoint 95 converter that ships with PowerPoint 2000 through PowerPoint 2003. The vulnerability is in the software's inability to properly handle malformed user-supplied input. A successful exploit may lead to arbitrary code execution.
Affected Products Microsoft Office PowerPoint 2000 Service Pack 3 Microsoft Office PowerPoint 2002 Service Pack 3 Microsoft Office PowerPoint 2003 Service Pack 3
Recommended Actions Please refer to the Microsoft advisory for the latest updates or patches: http://www.microsoft.com/technet/security/bulletin/ms09-017.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-1129
Reference/s http://www.microsoft.com/technet/security/Bulletin/ms09-017.mspx (MS-ID)

Fortinet