Microsoft PowerPoint Errors in Parsing Object Pointers and Data Records Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1017030 |
|
SecurityTracker URL: http://securitytracker.com/id/1017030
|
|
CVE Reference:
CVE-2006-3435, CVE-2006-3876, CVE-2006-3877
(Links to External Site)
|
Date: Oct 10 2006
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2000, 2002, 2003, 2004 for Mac, 2004 v. X for Mac
|
Description:
Several vulnerabilities were reported in Microsoft PowerPoint. A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create a specially crafted PowerPoint file that, when loaded by the target user, will trigger a memory access error and execute arbitrary code on the target system. The code will run with the privileges of the target user.
A malformed object pointer, malformed data record, or malformed placeholder data can trigger these vulnerabilities.
Microsoft credits Arnaud Dovi and TippingPoint, Dejun Meng of Fortinet, and Chris Ries with reporting these vulnerabilities.
|
Impact:
A remote user can create a PowerPoint file that, when loaded by the target user, will execute arbitrary code on the target user's system.
|
Solution:
The vendor has issued the following fixes:
Microsoft Office 2000 Service Pack 3:
http://www.microsoft.com/downloads/details.aspx?FamilyId=14A61FDA-BFE2-47CA-8313-40B772359994
Microsoft Office XP Service Pack 3:
http://www.microsoft.com/downloads/details.aspx?FamilyId=0FBD66FB-28BB-4587-9425-AD4A3F10651D
Microsoft Office 2003 Service Pack 1 or Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?FamilyId=D0E30F77-B48F-4B8B-A6FA-105A354B1A4E
Microsoft PowerPoint 2004 for Mac:
http://www.microsoft.com/mac/
Microsoft PowerPoint v. X for Mac:
http://www.microsoft.com/mac/
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms06-058.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms06-058.mspx (Links to External Site)
|
Cause:
Boundary error, Input validation error
|
Underlying OS:
UNIX (OS X), Windows (2000), Windows (2003), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 10 Oct 2006 13:55:08 -0400
Subject: Microsoft Security Bulletin MS06-058: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (924163)
|
http://www.microsoft.com/technet/security/bulletin/ms06-058.mspx
CVE-2006-3435
CVE-2006-3876
CVE-2006-3877
CVE-2006-4694
|
|
