Vulnerability Note VU#190089
Microsoft PowerPoint malformed record vulnerability
OverviewMicrosoft PowerPoint fails to properly handle malformed records. This may allow a remote attacker to execute arbitrary code on a vulnerable system.
I. DescriptionMicrosoft PowerPoint
Microsoft PowerPoint is presentation software that is available on Microsoft Windows and Apple Mac platforms.
PowerPoint documents
A PowerPoint document is made up of a tree of records. These records can contain data or other records.
The problem
Microsoft PowerPoint fails to properly handle malformed records.
II. ImpactBy convincing a user to open a PowerPoint document, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system with the privileges of the user.
III. SolutionApply an update
This issue is addressed in Microsoft Security Bulletin MS06-028. Note that Windows and Mac versions of PowerPoint are affected.
Do not open PowerPoint documents from untrusted sources
By only accessing PowerPoint documents from trusted or known sources, the chances of exploitation are reduced.
Systems Affected
References
http://www.microsoft.com/technet/security/Bulletin/MS06-028.mspx
http://secunia.com/advisories/20633/
Credit
Thanks to Microsoft Security for reporting this vulnerability.
This document was written by Will Dormann.
Other Information
| Date Public: | 2006-06-13 |
| Date First Published: | 2006-06-13 |
| Date Last Updated: | 2006-06-15 |
| CERT Advisory: | |
| CVE-ID(s): | CVE-2006-0022 |
| NVD-ID(s): | CVE-2006-0022 |
| US-CERT Technical Alerts: | |
| Metric: | 13.67 |
| Document Revision: | 3 |
If you have feedback, comments, or additional information about this vulnerability, please send us
email.
|
Get Adobe Reader