iDefense Security Advisory 05.12.09 – Remote exploitation of a heap corruption vulnerability in Microsoft Corp.’s PowerPoint could allow an attacker to execute arbitrary code with the privileges of the current user. In particular, there is code that parses structures in the PowerPoint file. If the number of these structures is greater than a certain value, then memory corruption will occur. This memory corruption leads to the executing of arbitrary code. iDefense has confirmed the existence of these vulnerabilities in PowerPoint 2000 SP3 and XP SP3.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/77463/05.12.09-2.txt
Source: https://packetstormsecurity.com/files/77463/iDEFENSE-Security-Advisory-2009-05-12.2.html