Two vulnerabilities have been reported in Microsoft PowerPoint, which can be exploited by malicious people to compromise a user's system.

1) A logic error in PP7X32.DLL when parsing certain records can be exploited to cause a heap-based buffer overflow via a specially crafted PowerPoint 95 file.

2) An integer underflow error when parsing a certain record can be exploited to cause a heap-based buffer overflow via a specially crafted PowerPoint file.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Alin Rad Pop, Secunia Research.
2) An anonymous person via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS10-088 (KB2293386, KB2413272, KB2413304, KB2413381):
http://www.microsoft.com/technet/security/Bulletin/MS10-088.mspx

Secunia Research:
http://secunia.com/secunia_research/2010-61/

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-10-245/

Technical Analysis
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers