Microsoft PowerPoint fails to properly handle malformed records

Overview Microsoft PowerPoint fails to properly handle malformed records allowing a buffer overflow to occur. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft PowerPoint fails to properly handle malformed records. Specifically,...

Microsoft PowerPoint 2003 SP2 (French) - Local Code Execution

Microsoft PowerPoint 2003 SP2 French - Local Code Execution / 30.07.2006 NSRocket presents Microsoft PowerPoint 2003 SP2 updated french version exploit tested on WinXP SP2 Microsoft PowerPoint is prone to a remote code execution issue which may be triggered when a malformed PPT file is closed. Co...

Microsoft PowerPoint 2003 SP2 (French) - Local Code Execution

/ 30.07.2006 NSRocket presents Microsoft PowerPoint 2003 SP2 updated french version exploit tested on WinXP SP2 Microsoft PowerPoint is prone to a remote code execution issue which may be triggered when a malformed PPT file is closed. Code execution is possible only if these conditions are...

Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit (french)

Exploit for unknown platform in category local exploits =================================================================== Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit french =================================================================== / 30.07.2006 NSRocket presents Microsof...

Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit (french)

No description provided by source. / 30.07.2006 NSRocket presents Microsoft PowerPoint 2003 SP2 updated french version exploit tested on WinXP SP2 Microsoft PowerPoint is prone to a remote code execution issue which may be triggered when a malformed PPT file is closed. Code execution is possib...

CVE-2006-3656

Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to...

CVE-2006-3655

Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3656, CVE-2006-3660, and CVE-2006-3590...

CVE-2006-3656

Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to...

CVE-2006-3655

Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3656, CVE-2006-3660, and CVE-2006-3590...

CVE-2006-3660

Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590, although it is...

CVE-2006-3655

CVE-2006-3655, CVE-2006-3656, and related CVEs concern Microsoft PowerPoint 2003. The connected sources describe an attacker-assisted exploit via crafted PowerPoint files affecting PowerPoint 2003 (PowerPoint’s PowerPoint parsing/mso.dll and powerpnt.exe) that can lead to arbitrary code execution...

CVE-2006-3590

mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493...

CVE-2006-3590

Microsoft PowerPoint Mso.dll Vulnerability (CVE-2006-3590) affects PowerPoint 2000–2003 where parsing a malformed shape container in a PPT file can lead to remote code execution. The underlying issue is memory corruption when PowerPoint processes a specially crafted file, potentially via email at...

Microsoft PowerPoint 2003 - powerpnt.exe Remote Overflow

Microsoft PowerPoint 2003 - powerpnt.exe Remote Overflow / source: https://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. It is...

Microsoft PowerPoint 2003 - '.ppt' File Closure Memory Corruption

// source: https://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. It is currently unknown if these three exploit files pertain to newl...

Microsoft PowerPoint 2003 - 'mso.dll' '.PPT' Processing Code Execution

// source: https://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. It is currently unknown if these three exploit files pertain to newl...

Microsoft PowerPoint 2003 - 'powerpnt.exe' Remote Overflow

/ source: https://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. It is currently unknown if these three exploit files pertain to newly...

Microsoft PowerPoint 2003 - mso.dll .PPT Processing Code Execution

Microsoft PowerPoint 2003 - mso.dll .PPT Processing Code Execution // source: https://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. I...

Microsoft PowerPoint 2003 - .ppt File Closure Memory Corruption

Microsoft PowerPoint 2003 - .ppt File Closure Memory Corruption // source: https://www.securityfocus.com/bid/18993/info Microsoft PowerPoint is prone to multiple remote vulnerabilities. Three proof-of-concept exploit files designed to trigger vulnerabilities in PowerPoint have been released. It i...

[Full-disclosure] Microsoft PowerPoint 0-day Vulnerability FAQ document written

I have written FAQ document including 33 items about the recently reported 0-day vulnerability in PowerPoint. This vulnerability is being exploited by Trojan horse including keylogger features. The document entitled as Microsoft PowerPoint 0-day Vulnerability FAQ is located at my SecuriTeam Blogs...