Microsoft PowerPoint malformed record vulnerability

2006-06-13T00:00:00
ID VU:190089
Type cert
Reporter CERT
Modified 2006-06-15T00:00:00

Description

Overview

Microsoft PowerPoint fails to properly handle malformed records. This may allow a remote attacker to execute arbitrary code on a vulnerable system.

Description

Microsoft PowerPoint

Microsoft PowerPoint is presentation software that is available on Microsoft Windows and Apple Mac platforms.

PowerPoint documents

A PowerPoint document is made up of a tree of records. These records can contain data or other records.

The problem

Microsoft PowerPoint fails to properly handle malformed records.


Impact

By convincing a user to open a PowerPoint document, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system with the privileges of the user.


Solution

Apply an update

This issue is addressed in Microsoft Security Bulletin MS06-028. Note that Windows and Mac versions of PowerPoint are affected.


Do not open PowerPoint documents from untrusted sources

By only accessing PowerPoint documents from trusted or known sources, the chances of exploitation are reduced.


Systems Affected

Vendor| Status| Date Notified| Date Updated
---|---|---|---
Microsoft Corporation| | -| 13 Jun 2006
If you are a vendor and your product is affected, let us know.

CVSS Metrics

Group | Score | Vector
---|---|---
Base | N/A | N/A
Temporal | N/A | N/A
Environmental | N/A | N/A

References

  • <http://www.microsoft.com/technet/security/Bulletin/MS06-028.mspx>
  • <http://secunia.com/advisories/20633/>

Credit

Thanks to Microsoft Security for reporting this vulnerability.

This document was written by Will Dormann.

Other Information

  • CVE IDs: CVE-2006-0022
  • Date Public: 13 Jun 2006
  • Date First Published: 13 Jun 2006
  • Date Last Updated: 15 Jun 2006
  • Severity Metric: 13.67
  • Document Revision: 3