Secunia

Two vulnerabilities have been reported in Microsoft PowerPoint, which can be exploited by malicious people to compromise a user's system.

1) An error when parsing malformed records and can be exploited to corrupt memory and execute arbitrary code via a presentation containing a specially crafted record.

2) An error in mso.dll when parsing malformed shape containers can be exploited to cause a buffer overflow via a specially crafted presentation.

Successful exploitation allows execution of arbitrary code.

NOTE: This vulnerability is currently being exploited in the wild.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) The vendor credits SoWhat, Nevis Labs.
2) Discovered in the wild as a 0-day.

Changelog
Further details available in Customer Area

Original Advisory
MS06-048 (KB922968):
http://www.microsoft.com/technet/security/Bulletin/MS06-048.mspx

Microsoft:
http://www.microsoft.com/technet/security/advisory/922970.mspx
http://blogs.technet.com/msrc/archive/2006/07/14/441893.aspx

Sowhat:
http://secway.org/advisory/AD20060808.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area