[USN-388-1] KOffice vulnerability

=========================================================== Ubuntu Security Notice USN-388-1 November 29, 2006 koffice vulnerability CVE-2006-6120 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 This advisory also...

USN-388-1: KOffice vulnerability

An integer overflow was discovered in KOffice's filtering code. By tricking a user into opening a specially crafted PPT file, attackers could crash KOffice or possibly execute arbitrary code with the user's privileges...

Microsoft Office .ppt File Detection

Binary data 3824.prm...

Microsoft Office 2003 PPT Local Buffer Overflow PoC

No description provided by source. !/bin/perl PPT 0day poc OFFICE 2003 full Patch 3001afbc 8b01 mov eax,ecx ds:0023:00000000=???????? 3001afbe 56 push esi 3001afbf ff5014 call dword ptr eax+0x14 try control ecx.............:P Maybe can Exploit [email protected] [email protected] www.chroot.org my...

ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability

ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-032.html October 10, 2006 -- CVE ID: CVE-2006-3435 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3...

CVE-2006-3876

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694...

Microsoft PowerPoint Malformed Slide Notes Rebuilding Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires that the attacker coerce the target user into opening a malicious .PPT file. The specific flaw exists during the parsing of a malformed slide notes field within the...

CVE-2006-3876: Improper Control of Generation of Code

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694...

CVE-2006-4694

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and...

CVE-2006-4694

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and...

CVE-2006-4694

A memory corruption vulnerability exists in Microsoft PowerPoint (specifically within versions like Office 2000, XP, and 2003) due to insufficient validation of malformed records when parsing .ppt files. An attacker can exploit this by persuading a user to open a specially crafted file, which may...

CVE-2006-4854

CVE-2006-4854 is a duplicate of CVE-2006-0009. The connected data describe a remote code execution vulnerability in Microsoft Office components caused by how routing slip metadata is parsed. Specifically, a crafted routing slip within an Office document (Word/Excel/PowerPoint/Outlook) can trigger...

CVE-2006-4274

CVE-2006-4274 is a duplicate of CVE-2006-0009 and is treated as rejected/duplicate per the initial entry. The connected documentation describes the underlying issue as a Microsoft Office routing slip buffer overflow/remote code execution vulnerability, exploited by malicious Office documents cont...

CVE-2006-3449: Undefined Security Weakness

Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file, a different issue than CVE-2006-1540, aka "Microsoft PowerPoint...

[Full-disclosure] Microsoft PowerPoint Malformed Record Memory Corruption

Microsoft PowerPoint Malformed Record Memory Corruption Vulnerability By Sowhat of Nevis Labs 2006.08.08 http://www.nevisnetworks.com http://secway.org/advisory/AD20060808.txt Vendor Microsoft Inc. Microsoft PowerPoint 2000 Microsoft PowerPoint 2002 Microsoft Office PowerPoint 2003 PowerPoint 200...

Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit (french)

No description provided by source. / 30.07.2006 NSRocket presents Microsoft PowerPoint 2003 SP2 updated french version exploit tested on WinXP SP2 Microsoft PowerPoint is prone to a remote code execution issue which may be triggered when a malformed PPT file is closed. Code execution is possib...

Microsoft PowerPoint 2003 SP2 (French) - Local Code Execution

/ 30.07.2006 NSRocket presents Microsoft PowerPoint 2003 SP2 updated french version exploit tested on WinXP SP2 Microsoft PowerPoint is prone to a remote code execution issue which may be triggered when a malformed PPT file is closed. Code execution is possible only if these conditions are...

Microsoft PowerPoint 2003 SP2 (French) - Local Code Execution

Microsoft PowerPoint 2003 SP2 French - Local Code Execution / 30.07.2006 NSRocket presents Microsoft PowerPoint 2003 SP2 updated french version exploit tested on WinXP SP2 Microsoft PowerPoint is prone to a remote code execution issue which may be triggered when a malformed PPT file is closed. Co...

Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit (french)

Exploit for unknown platform in category local exploits =================================================================== Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit french =================================================================== / 30.07.2006 NSRocket presents Microsof...

CVE-2006-3590

mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493...