Secunia flags second PowerPoint flaw

Posted on 18 Jul 2006 at 12:57

Secunia has reported a second critical security vulnerability discovered in PowerPoint.

According to the company, the vulnerability is due to the application 'using data taken directly from a PowerPoint presentation file as a pointer when saving or closing the presentation'. This can lead to memory being corrupted and the program flow being manipulated.

As well as crashing the application, arbitrary code execution may also be possible, but this has not currently been proven. Secunia warns against opening untrusted Microsoft Office documents.

For more information see Secunia Advisory SA21061.

A separate, extremely critical PowerPoint flaw was discovered at the weekend.

Author: Simon Aughton