cve-2011-1270

CVE-2011-1270 is a vulnerability addressed in Microsoft Security Bulletin MS11-036, which resolves two privately reported vulnerabilities in Microsoft PowerPoint. This vulnerability could allow remote code execution if a user opens a specially crafted PowerPoint file. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. Users with fewer user rights on the system could be less impacted than those with administrative rights. The bulletin recommends installing and configuring Office File Validation (OFV) to prevent the opening of suspicious files, which blocks the attack vectors for exploiting this vulnerability. The update is rated Important and applies to various versions of Microsoft Office.