Update Protection against Multiple Microsoft Office Vulnerabilities (MS06-012)

Several remote code execution vulnerabilities exist in Microsoft Office, including vulnerabilities in Excel, Power Point and Word. A remote attacker may create a malicious Excel, PowerPoint or Word file and host it on a Web site or send it as an email attachment. This may allow an attacker to...

CVE-2006-0009

Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJMDROPPER.BH and Trojan.PPDropper.E in...

CVE-2006-0009

CVE-2006-0009 is the Office routing slip remote code execution vulnerability. A buffer/memory corruption occurs when parsing a routing slip in an Office document, potentially allowing arbitrary code execution. Affected products include Microsoft Office 2000 SP3, Office XP SP3, and related PowerPo...

Microsoft Security Bulletin MS06-010 Vulnerability in PowerPoint 2000 Could Allow Information Disclosure (889167)

Microsoft Security Bulletin MS06-010 Vulnerability in PowerPoint 2000 Could Allow Information Disclosure 889167 Published: February 14, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft PowerPoint 2000 Impact of Vulnerability: Information Disclosure Maximum...

CVE-2006-0004

Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder TIFF...

Code injection

Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder TIFF...

CVE-2006-0004

CVE-2006-0004 is a information-disclosure vulnerability in Microsoft PowerPoint 2000 (Office 2000 SP3) arising from the interaction with Internet Explorer when PowerPoint renders HTML, allowing remote attackers to access objects in the Temporary Internet Files Folder (TIFF) by name. The issue aff...

CVE-2006-0004

Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder TIFF...

MS06-010: Vulnerability in PowerPoint 2000 Could Allow Information Disclosure (889167)

The remote host contains a version of PowerPoint that is vulnerable to an information disclosure attack. Specifically, an attacker could send a malformed PowerPoint file to a a victim on the remote host. When the victim opens the file, the attacker may be able to obtain access to the files in the...

Microsoft PowerPoint 2000 Remote Information Disclosure Vulnerability

Description Microsoft PowerPoint 2000 is prone to a remote information-disclosure vulnerability. Information gathered may be used to launch further attacks against a vulnerable computer. Technologies Affected Microsoft PowerPoint 2000 SP3 Recommendations Do not follow links provided by unknown or...

Microsoft PowerPoint may disclose information in the Temporary Internet Files Folder

Overview Microsoft PowerPoint contains an information disclosure vulnerability. As a result, sensitive information may be exposed to untrusted parties. Description Microsoft PowerPoint fails to properly restrict access to objects in the Temporary Internet Files Folder TIFF. This vulnerability is...

CVE-2003-1477

MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service CPU consumption via a PowerPoint attachment that either 1 is corrupt or 2 contains "embedded objects."...

MAILsweeper for SMTP PowerPoint Document Processing DoS

The remote host is running MAILsweeper - a content security solution for SMTP. According to its banner, the remote version of MAILsweeper consumes all available CPU resources when processing a malformed PowerPoint file, causing the server to become non-responsive. A remote attacker could exploit...

w00w00 on Microsoft IE/Office for Mac OS

w00w00 http://www.w00w00.org Angry Packet Security http://sec.angrypacket.com Vulnerability in Multiple Microsoft Products for Mac OS HTML format: http://www.w00w00.org/advisories/msmacos.html Text format: http://www.w00w00.org/files/advisories/msmacos.txt SOFTWARE VERSIONS AFFECTED Microsft...

CVE-2001-0718

The CVE-2001-0718 issue affects Microsoft Excel and PowerPoint (across Windows and Macintosh releases up to 2002). Affected components are the macro handling/data stream processing; attackers can bypass macro restrictions by modifying the document data stream, enabling arbitrary code execution wh...

CVE-2001-0718

Vulnerability in 1 Microsoft Excel 2002 and earlier and 2 Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document...

CVE-2001-0718

Vulnerability in 1 Microsoft Excel 2002 and earlier and 2 Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document...

Microsoft PowerPoint and Excel fail to properly detect macros thereby automatically executing malicious code via crafted document (MS01-050)

Overview A malformed Microsoft Excel or PowerPoint document can bypass macro checking thereby allowing arbitrary code to be run on the target system. Description Microsoft Excel and PowerPoint scan documents when they are opened and check for the existence of macros. If the document contains...

Symantec Security Response SecBul-10042001, Revision1, Malformed Microsoft Excel or PowerPoint documents bypass Microsoft macro security features

Symantec Security Bulletin Symantec Security Response SecBul-10042001 Date Issued: 04 October 2001 Revision 1: 05 October,2001 HEADLINE: Malformed Microsoft Excel or PowerPoint documents bypass Microsoft macro security features. SOURCE: Symantec Corporation. RISK Impact: High Unauthorized macro...

Security Bulletin MS01-050

---------------------------------------------------------------------- Title: Malformed Excel or PowerPoint Document Can Bypass Macro Security Date: 04 October 2001 Software: Microsoft Excel or PowerPoint for Windows or Macintosh Impact: Run Code Of Attacker's Choice Bulletin: MS01-050 Microsoft...