[slackware-security] koffice

A new koffice package is available for Slackware 10.2 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-6120 Here are the details from the Slackware 10.2 ChangeLog:...

Microsoft PowerPoint未明代码执行漏洞

Microsoft PowerPoint是一款流行的图片展示应用程序。 Microsoft PowerPoint处理恶意PPT文件存在问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Microsoft PowerPoint 2003 SP2及之前版本 http://www.microsoft.com/technet/security...

KOffice畸形PPT文件处理整数溢出漏洞

KOffice是基于Linux的办公软件应用程序。 KOffice在处理带有畸形内容的PPT文档时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 KOffice的filters/olefilters/lib/klaola.cc文件中KLaola::readBigBlockDepot方法存在整数溢出漏洞。如果用户受骗打开了特制的.ppt文件的话，就会触发堆溢出，导致执行任意指令。 KDE KOffice 1.6.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2006-6120

Integer overflow in the KPresenter import filter for Microsoft PowerPoint files filters/olefilters/lib/klaola.cc in KOffice before 1.6.1 allows user-assisted remote attackers to execute arbitrary code via a crafted PPT file, which results in a heap-based buffer overflow...

CVE-2006-6120

CVE-2006-6120 affects KOffice before 1.6.1, specifically the KPresenter PPT import filter (filters/olefilters/lib/klaola.cc). The vulnerability is an integer overflow in the PPT handling path that can lead to a heap-based buffer overflow when a crafted PPT file is opened, enabling a user‑assisted...

[USN-388-1] KOffice vulnerability

=========================================================== Ubuntu Security Notice USN-388-1 November 29, 2006 koffice vulnerability CVE-2006-6120 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 5.10 This advisory also...

USN-388-1: KOffice vulnerability

An integer overflow was discovered in KOffice's filtering code. By tricking a user into opening a specially crafted PPT file, attackers could crash KOffice or possibly execute arbitrary code with the user's privileges...

Microsoft Office .ppt File Detection

Binary data 3824.prm...

Microsoft Office 2003 PPT Local Buffer Overflow PoC

No description provided by source. !/bin/perl PPT 0day poc OFFICE 2003 full Patch 3001afbc 8b01 mov eax,ecx ds:0023:00000000=???????? 3001afbe 56 push esi 3001afbf ff5014 call dword ptr eax+0x14 try control ecx.............:P Maybe can Exploit [email protected] [email protected] www.chroot.org my...

ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability

ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-032.html October 10, 2006 -- CVE ID: CVE-2006-3435 -- Affected Vendor: Microsoft -- Affected Products: Microsoft Office 2000 SP3 Microsoft Office XP SP3...

CVE-2006-3876

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via a crafted Data record in a PPT file, a different vulnerability than CVE-2006-3435 and CVE-2006-4694...

Microsoft PowerPoint Malformed Slide Notes Rebuilding Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires that the attacker coerce the target user into opening a malicious .PPT file. The specific flaw exists during the parsing of a malformed slide notes field within the...

CVE-2006-4694

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and...

CVE-2006-4694

Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and...

CVE-2006-4694

The CVE-2006-4694 entry concerns a vulnerability in Microsoft PowerPoint (Office 2000/XP/2003) where malformed PowerPoint records, specifically NamedShows, are not properly handled. A crafted .PPT file can enable user‑assisted code execution in the context of the logged‑in user, with exploit acti...

CVE-2006-4854

CVE-2006-4854 is a duplicate of CVE-2006-0009. The connected data describe a remote code execution vulnerability in Microsoft Office components caused by how routing slip metadata is parsed. Specifically, a crafted routing slip within an Office document (Word/Excel/PowerPoint/Outlook) can trigger...

CVE-2006-4274

CVE-2006-4274 is a duplicate of CVE-2006-0009 and is treated as rejected/duplicate per the initial entry. The connected documentation describes the underlying issue as a Microsoft Office routing slip buffer overflow/remote code execution vulnerability, exploited by malicious Office documents cont...

[Full-disclosure] Microsoft PowerPoint Malformed Record Memory Corruption

Microsoft PowerPoint Malformed Record Memory Corruption Vulnerability By Sowhat of Nevis Labs 2006.08.08 http://www.nevisnetworks.com http://secway.org/advisory/AD20060808.txt Vendor Microsoft Inc. Microsoft PowerPoint 2000 Microsoft PowerPoint 2002 Microsoft Office PowerPoint 2003 PowerPoint 200...

Microsoft PowerPoint 2003 SP2 Local Code Execution Exploit (french)

No description provided by source. / 30.07.2006 NSRocket presents Microsoft PowerPoint 2003 SP2 updated french version exploit tested on WinXP SP2 Microsoft PowerPoint is prone to a remote code execution issue which may be triggered when a malformed PPT file is closed. Code execution is possib...

Microsoft PowerPoint 2003 SP2 (French) - Local Code Execution

/ 30.07.2006 NSRocket presents Microsoft PowerPoint 2003 SP2 updated french version exploit tested on WinXP SP2 Microsoft PowerPoint is prone to a remote code execution issue which may be triggered when a malformed PPT file is closed. Code execution is possible only if these conditions are...