SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   Microsoft PowerPoint Vendors:   Microsoft
[Duplicate Entry] Microsoft PowerPoint Unknown Bug May Let Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1016720
SecurityTracker URL:  http://securitytracker.com/id/1016720
CVE Reference:   CVE-2006-4274   (Links to External Site)
Updated:  Aug 22 2006
Original Entry Date:  Aug 21 2006
Impact:   Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  Exploit Included:  Yes  

Description:   A vulnerability was reported in Microsoft PowerPoint. A remote user can cause arbitrary code to be executed on the target user's system.

[Editor's note: This vulnerability was previously reported and previously corrected by MS06-012. This duplicate entry will be deleted shortly.]

A remote user can create a specially crafted PowerPoint file that, when loaded by the target user, will trigger an unknown vulnerability and execute arbitrary code on the target system. The code will run with the privileges of the target user.

TrendMicro reported this vulnerability in their August 17, 2006 report on a trojan horse PowerPoint file that "attempts to exploit an unknown system vulnerability." On August 22, 2006, TrendMicro updated their report to indicate that the trojan exploits a previously described vulnerability, which has since been patched by Microsoft MS06-012. Patched systems (patched with MS06-012) are not affected.

The original report is available at:

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FMDROPPER%2EBH&VSect=T

A third party FAQ is available at:

http://blogs.securiteam.com/index.php/archives/559

Impact:   A remote user can create a file that, when loaded by the target user, will execute arbitrary code on the target user's system.
Solution:   No solution was available at the time of this entry.

[Editor's note: This vulnerability was previously reported and previously corrected by MS06-012. This duplicate entry will be deleted shortly.]

Vendor URL:  www.microsoft.com/ (Links to External Site)
Cause:   Boundary error
Underlying OS:  Windows (Any)

Message History:   None.


 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC