Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate PersistDirectoryEntry records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Slide with a malformed record, which triggers an exception and later use of an unspecified method, aka "Persist Directory RCE Vulnerability."

The remote Windows host has a version of Microsoft PowerPoint that is affected by multiple code execution vulnerabilities. A remote attacker could exploit this by tricking a user into viewing a maliciously crafted PowerPoint file.

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities.

If an attacker can trick a user on the affected host into opening a specially crafted Office file, these issues could be leveraged to execute arbitrary code subject to the user's privileges.

ID	Name	Product	Family	Severity
53379	MS11-022: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2489283)	Nessus	Windows : Microsoft Bulletins	high
53374	MS11-021 / MS11-022 / MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489279 / 2489283 / 2489293) (Mac OS X)	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2011-0656

high

Tenable Plugins

high

high