Microsoft PowerPoint 2000远程信息泄露漏洞（MS06-010）

Microsoft PowerPoint是一款流行的办公软件，主要用于演示演讲稿。 Microsoft PowerPoint 2000在同Internet Explorer交互时存在信息泄露漏洞，可能允许远程攻击者通过名称尝试访问临时Internet文件文件夹（TIFF）中的对象来获得敏感信息。 Microsoft PowerPoint 2000 Microsoft已经为此发布了一个安全公告（MS06-010）以及相应补丁: MS06-010：Vulnerability in PowerPoint 2000 Could Allow Information Disclosure 88916...

Microsoft PowerPoint畸形记录处理代码执行漏洞（MS06-048）

Microsoft PowerPoint是微软发布的非常流行的文档演示工具。 Microsoft PowerPoint在解析畸形的PPT记录时存在内存破坏漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 反汇编代码如下： 3009a818 3945fc cmp ebp-0x4,eax 3009a81b 7703 ja POWERPNT+0x9a820 3009a820 3009a81d 8b45fc mov eax,ebp-0x4 3009a820 8b7308 mov esi,ebx+0x8 3009a823 8b7d08 mov edi,ebp+0x8 3009a826...

Microsoft PowerPoint畸形记录远程代码执行漏洞（MS06-058）

PowerPoint是非常流行的电子文稿演示工具。 PowerPoint的实现在处理畸形记录时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 当PowerPoint处理畸形记录时可能触发一个非授权内存访问，攻击者可能利用此漏洞。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft PowerPoint 2003 SP3 Microsoft PowerPoint 2003 SP2 Microsoft PowerPoint 2003 SP1 Microsoft PowerPoint 2003 Microsoft PowerPoint...

Microsoft PowerPoint畸形记录远程代码执行漏洞（MS06-028）

Microsoft PowerPoint是非常流行的文稿演示工具。 PowerPoint在处理畸形记录的时候存在内存破坏漏洞，攻击者可以通过创建特制的PowerPoint文件来利用这个漏洞，如果用户访问了该文件的话就会导致代码执行。 Microsoft PowerPoint v.X for Mac Microsoft PowerPoint 2004 for Mac Microsoft PowerPoint 2003 Microsoft PowerPoint 2002 Microsoft PowerPoint 2000 临时解决方法： 不要打开不可信任来源接收到的Microsoft...

Microsoft PowerPoint畸形数据记录远程代码执行漏洞（MS06-058）

PowerPoint是非常流行的电子文稿演示工具。 PowerPoint的实现处理畸形数据记录时存在漏洞，攻击者可能利用此漏洞执行任意指令。 在解析包含畸形数据记录的文件时，攻击者可能利用此漏洞。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft PowerPoint v.X for Mac Microsoft PowerPoint 2004 for Mac Microsoft PowerPoint 2003 Microsoft PowerPoint 2002 Microsoft PowerPoint 2000 不要打开不可信任的PPT文档...

Microsoft Powerpoint远程执行任意代码漏洞（MS06-048）

Microsoft Powerpoint是非常流行的文稿演示工具。 Powerpoint在解析特制文档中的某些字符串时存在错误，可能允许攻击者通过诱骗用户打开恶意PPT文档执行任意代码。 目前这个漏洞正在被名为Trojan.PPDropper.B的木马积极的利用。 Microsoft PowerPoint 2003 SP2 Microsoft PowerPoint 2003 SP1 Microsoft PowerPoint 2003 Microsoft已经为此发布了一个安全公告（MS06-048）以及相应补丁: MS06-048：Vulnerabilities in Microsoft...

Microsoft PowerPoint畸形幻灯片注释重构代码执行漏洞（MS06-058）

PowerPoint是微软发布的非常流行的电子文档演示工具。 PowerPoint在解析演示文档中畸形的幻灯片注释字段时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 当PowerPoint试图重构畸形部分时，可能会进行基于攻击者提供数据的指针计算，之后又引用了该指针，这可能导致以打开恶意文件用户的权限执行任意指令。 Microsoft PowerPoint 2003 临时解决方法： 不要打开或保存从不受信任来源收到的Microsoft PowerPoint文件。 厂商补丁： Microsoft ---------...

CVE-2006-5296

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service NULL dereference and application crash via a crafted PowerPoint .PPT file, as demonstrated by Nanika.pp...

CVE-2006-5296

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service NULL dereference and application crash via a crafted PowerPoint .PPT file, as demonstrated by Nanika.pp...

CVE-2006-5296

CVE-2006-5296 is a PowerPoint parsing vulnerability in Microsoft PowerPoint (Office era) where a crafted PowerPoint PPT file can trigger a remote code execution through improper parsing of PPT records. The connected advisory (MS06-058 family) and related CPAI entries describe memory corruption ri...

Microsoft PowerPoint NamedShows record code execution

Added: 10/12/2006 CVE: CVE-2006-4694 BID: 20226 OSVDB: 29259 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed NamedShows records in PowerPoint files allows command execution. Resolution Apply the patch...

Microsoft PowerPoint NamedShows record code execution

Added: 10/12/2006 CVE: CVE-2006-4694 BID: 20226 OSVDB: 29259 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed NamedShows records in PowerPoint files allows command execution. Resolution Apply the patch...

Microsoft PowerPoint NamedShows record code execution

Added: 10/12/2006 CVE: CVE-2006-4694 BID: 20226 OSVDB: 29259 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed NamedShows records in PowerPoint files allows command execution. Resolution Apply the patch...

Microsoft PowerPoint NamedShows record code execution

Added: 10/12/2006 CVE: CVE-2006-4694 BID: 20226 OSVDB: 29259 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem Improper handling of malformed NamedShows records in PowerPoint files allows command execution. Resolution Apply the patch...

Microsoft PowerPoinr memory corruption

0-day vulberability in SlideShowWindows.View.GotoNamedShow function is used for malware installation...

Microsoft Security Bulletin MS06-058 Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (924163)

Microsoft Security Bulletin MS06-058 Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution 924163 Published: October 10, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft PowerPoint Impact of Vulnerability: Remote Code Execution Maximum...

CVE-2006-3877

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and...

CVE-2006-3864

Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a 1 .DOC, 2 .PPT, or 3 .XLS file that triggers memory corruption, related to an "arra...

CVE-2006-3877

PowerPoint Malformed Record Memory Corruption Vulnerability (CVE-2006-3877) affects multiple Office suites. A remote code execution flaw exists when PowerPoint opens a specially crafted file with malformed records, allowing an attacker to gain full control of the affected system if the user runs ...

CVE-2006-3876

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694...