Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:powerpoint:2007:*:*:*:*:*:*:*

part: a version: 2007 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductPowerpoint (9782564d-6f4d-5e08-8b25-bfb6cfb76e42)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0976 vulnerable 2026-06-08 04:56:40.478469 Details available
Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art containers that have invalid records, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PowerPoint document with a container that triggers certain access to an uninitialized object, aka "OfficeArt Atom RCE Vulnerability."
Published: 2011-02-10T18:00:00.000Z
Updated: 2024-08-06T22:14:26.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3142 vulnerable 2026-06-08 04:55:12.943684 Details available
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse rpawinet.dll that is located in the same folder as a .odp, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppt, .ppthtml, .pptm, .pptxml, .pwz, .sldm, .sldx, and .thmx file.
Published: 2010-08-27T18:10:00.000Z
Updated: 2024-08-07T02:55:46.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3068 vulnerable 2026-06-08 04:50:32.941321 Details available
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.
Published: 2008-07-07T23:00:00.000Z
Updated: 2024-08-07T09:21:34.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.