[Duplicate Entry] Microsoft PowerPoint Unknown Bug May Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1016720
|
|
SecurityTracker URL: http://securitytracker.com/id?1016720
|
|
CVE Reference: CVE-2006-4274
(Links to External Site)
|
Updated: Aug 22 2006
|
Original Entry Date: Aug 21 2006
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Exploit Included: Yes
Vendor Confirmed: Yes
|
Description: A vulnerability was reported in Microsoft PowerPoint. A remote user can cause arbitrary code to be executed on the target user's system.
[Editor's note: This vulnerability was previously reported and previously corrected by MS06-012. This duplicate entry will be deleted
shortly.]
A remote user can create a specially crafted PowerPoint file that, when loaded by the target user, will trigger an
unknown vulnerability and execute arbitrary code on the target system. The code will run with the privileges of the target user.
TrendMicro
reported this vulnerability in their August 17, 2006 report on a trojan horse PowerPoint file that "attempts to exploit an unknown
system vulnerability." On August 22, 2006, TrendMicro updated their report to indicate that the trojan exploits a previously described
vulnerability, which has since been patched by Microsoft MS06-012. Patched systems (patched with MS06-012) are not affected.
The
original report is available at:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FMDROPPER%2EBH&VSect=T
A
third party FAQ is available at:
http://blogs.securiteam.com/index.php/archives/559
|
Impact: A remote user can create a file that, when loaded by the target user, will execute arbitrary code on the target user's system.
|
Solution: No solution was available at the time of this entry.
[Editor's note: This vulnerability was previously reported and previously corrected by MS06-012. This duplicate entry will be deleted shortly.]
|
Vendor URL: www.microsoft.com/ (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Sun, 20 Aug 2006 22:57:30 -0400
Subject: TROJ_MDROPPER.BH (Microsoft PowerPoint vulnerability)
|
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FMDROPPER%2EBH&VSect=T
|
|
