Lucene search

K
cve[email protected]CVE-2006-3449
HistoryAug 09, 2006 - 12:04 a.m.

CVE-2006-3449

2006-08-0900:04:00
web.nvd.nist.gov
33
microsoft
powerpoint
vulnerability
buffer overflow
remote code execution
biff file format
cve-2006-3449
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.455 Medium

EPSS

Percentile

97.4%

Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file, a different issue than CVE-2006-1540, aka “Microsoft PowerPoint Malformed Record Vulnerability.”

Affected configurations

NVD
Node
microsoftpowerpointMatch2000
OR
microsoftpowerpointMatch2000ja
OR
microsoftpowerpointMatch2000ko
OR
microsoftpowerpointMatch2000zh
OR
microsoftpowerpointMatch2000sp2
OR
microsoftpowerpointMatch2000sp3
OR
microsoftpowerpointMatch2000sr1
OR
microsoftpowerpointMatch2001mac_os
OR
microsoftpowerpointMatch2002
OR
microsoftpowerpointMatch2002sp1
OR
microsoftpowerpointMatch2002sp2
OR
microsoftpowerpointMatch2002sp3
OR
microsoftpowerpointMatch2003

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.455 Medium

EPSS

Percentile

97.4%