CVE-2011-1269

EXPLOITED

Microsoft PowerPoint 2002/2003/2007, Office 2004/2008 for Mac - RCE via Crafted Document

Title source: llm

Exploitation Summary

CVE-2011-1269 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 make unspecified function calls during file parsing without proper handling of memory, which allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Memory Corruption RCE Vulnerability."

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-036

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12438

Scores

EPSS 0.1488

EPSS Percentile 96.3%

Details

VulnCheck KEV 2012-01-01

CWE

CWE-20

Status published

Products (7)

microsoft/office 2004

microsoft/office 2008

microsoft/office_compatibility_pack 2007 sp2

microsoft/open_xml_file_format_converter

microsoft/powerpoint 2002 sp3

microsoft/powerpoint 2003 sp3

microsoft/powerpoint 2007 sp2

Published May 13, 2011

Tracked Since Feb 18, 2026