CVE:CVE-2009-0224
CNNVD:CNNVD-200905-153
Microsoft PowerPoint是美国微软（Microsoft）公司的Office套件中的一个文档演示工具。
PowerPoint在解析BuildList记录时存在内存破坏漏洞。BuildList记录是用于描述PowerPoint文件中表格和图标的其他记录的容器。如果所注入的多个BuildList记录中包含有ChartBuild容器的话，在解析ChartBuild容器的内容时就会触发内存破坏，允许攻击者控制对象指针并引用受控的函数。
solution:Upgrade microsoft compatibility_pack_word_excel_powerpoint to a higher version than 2007,2007:sp1,and avoid the version 2007,2007:sp1; Upgrade microsoft office_compatibility_pack_for_word_excel_ppt_2007 to a higher version than *,*:sp2,and avoid the version *:sp2; Upgrade microsoft office_powerpoint to a higher version than 2000:sp3,2002:sp3,2003:sp3,2007:sp1,and avoid the version 2000:sp3,2002:sp3,2003:sp3,2007:sp1; Upgrade microsoft office_powerpoint_viewer to a higher version than 2003,2007:sp1,2007:sp2,and avoid the version 2003,2007:sp1,2007:sp2; Upgrade microsoft open_xml_file_format_converter to a higher version than *; Upgrade microsoft powerpoint to a higher version than 2004,2008,and avoid the version 2004,2008; Upgrade microsoft works to a higher version than 8.5,9.0,and avoid the version 8.5,9.0