CVE-2013-4565

ppthtml < 0.5.1 - Heap-Based Buffer Overflow via Crafted PPT File

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in the __OLEdecode function in ppthtml 0.5.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .ppt file.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/88885
Exploit mailing-list x_refsource_mlist
http://seclists.org/oss-sec/2013/q4/279

Scores

EPSS 0.0348
EPSS Percentile 87.7%

Details

CWE
CWE-119
Status published
Products (1)
debian/ppthtml < 0.5.1
Published Apr 25, 2014
Tracked Since Feb 18, 2026