PO
Product
PowerPoint
On CISA KEVExploited in the wild
86
CVEs
4
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 36Medium 7Low 0
Watch
Add PowerPoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-3396 | – | Dec 14 | Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka… Affected: 2007; 2010; 2010 |
| CVE-2011-1270 | – | May 13 | Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun… Affected: 2002; 2003 |
| CVE-2011-1269 | – | May 13 | Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and… Affected: 2002; 2003; 2007 |
| CVE-2011-0655 | – | Apr 13 | Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007… Affected: 2010; 2010 |
| CVE-2011-0656 | – | Apr 13 | Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word,… Affected: 2002; 2003; 2007; 2010 |
| CVE-2011-0976 | – | Feb 10 | Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and… Affected: 2007 |
| CVE-2010-2573 | – | Nov 10 | Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted… Affected: 2002; 2003 |
| CVE-2010-3142 | – | Aug 27 | Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking… Affected: 2007 |
| CVE-2010-3141 | – | Aug 27 | Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via… Affected: 2010 |
| CVE-2010-0034 | – | Feb 10 | Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Office PowerPoint… Affected: 2003 |
| CVE-2010-0033 | – | Feb 10 | Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer… Affected: 2003 |
| CVE-2010-0032 | – | Feb 10 | Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka… Affected: 2002; 2003 |
| CVE-2010-0031 | – | Feb 10 | Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted… Affected: 2002; 2003 |
| CVE-2010-0030 | – | Feb 10 | Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka… Affected: 2002; 2003 |
| CVE-2010-0029 | – | Feb 10 | Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint File Path Handling… Affected: 2002 |
| CVE-2009-0224 | – | May 12 | Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008… Affected: 2004; 2008 |
| CVE-2008-3068 | – | Jul 7 | Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary… Affected: 2003; 2007 |
| CVE-2007-0913 | – | Feb 14 | Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as exploited by Trojan.PPDropper.G Affected: All versions, or not specified |
| CVE-2006-5296 | – | Oct 16 | PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a… Affected: 2003 |
| CVE-2006-3877 | – | Oct 10 | Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute… Affected: 2000; 2002; 2003; 2004 |
| CVE-2006-3449 | – | Aug 9 | Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a… Affected: 2000; 2000; 2000; 2000; 2000; 2000; +7 more |
| CVE-2006-3656 | – | Jul 18 | Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when… Affected: 2003; 2003; 2003 |
| CVE-2006-3655 | – | Jul 18 | Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file Affected: 2003; 2003; 2003 |
| CVE-2006-3660 | – | Jul 18 | Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe Affected: 2003; 2003; 2003 |
| CVE-2006-3590 | – | Jul 14 | mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads… Affected: 2000; 2002; 2003; 2003; 2003 |
| CVE-2006-0022 | – | Jun 13 | Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v Affected: 2000; 2000; 2000; 2000; 2002; 2002; +7 more |
| CVE-2004-0848 | – | Feb 8 | Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in… Affected: 2002; 2002; 2002; 2002 |
| CVE-2004-0200 | – | Sep 28 | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code… Affected: 2002; 2003 |
| CVE-2002-0152 | – | Apr 22 | Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file://… Affected: 98; 2001; v.x |
| CVE-2001-0718 | – | Oct 30 | Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by… Affected: through 2002 |
| CVE-2001-0005 | – | Feb 12 | Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands Affected: 2000 |
| CVE-2000-0765 | – | Oct 20 | Buffer overflow in the HTML interpreter in Microsoft Office 2000 allows an attacker to execute arbitrary commands via a long embedded object tag, aka the "Microsoft Office HTML… Affected: 2000 |
| CVE-2000-0597 | – | Jun 27 | Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97 are marked as safe for scripting, which allows remote attackers to force Internet Explorer or some email clients to… Affected: 97; 2000 |
| CVE-2000-0419 | – | May 11 | The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help,… Affected: 2000 |
| CVE-2000-0088 | – | Jan 20 | Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data"… Affected: 97; 97; 97; 2000; 2000; 2000 |
| CVE-1999-1474 | – | Dec 31 | PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is… Affected: 95; 97 |