[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2006-3590Date: (C)2006-07-14   (M)2023-12-22


mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.1
Exploit Score: 4.9
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECTRACK-1016496
BID-18957
http://www.securityfocus.com/archive/1/archive/1/440137/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/440255/100/0/threaded
http://www.securityfocus.com/archive/1/archive/1/440532/100/0/threaded
SECUNIA-21040
OSVDB-27324
ADV-2006-2795
MS06-048
TA06-220A
VU#936945
http://blogs.securiteam.com/?p=508
http://isc.sans.org/diary.php?storyid=1484
http://securityresponse.symantec.com/avcenter/venc/data/trojan.ppdropper.b.html
powerpoint-mso-code-execution(27740)
powerpoint-mso-code-execution2(27781)

CPE    5
cpe:/a:microsoft:powerpoint:2000
cpe:/a:microsoft:powerpoint:2002
cpe:/a:microsoft:powerpoint:2003
cpe:/a:microsoft:powerpoint:2003:sp1
...
OVAL    1
oval:org.mitre.oval:def:399

© SecPod Technologies