Microsoft PowerPoint Unspecified Code Execution Vulnerability

Bugtraq ID:	19229
Class:	Unknown
CVE:	CVE-2006-3656
Remote:	Yes
Local:	No
Published:	Jul 30 2006 12:00AM
Updated:	Nov 30 2006 04:45AM
Credit:	Naveed Afzal is credited with the initial discovery of this issue.
Vulnerable:	Microsoft PowerPoint 2003 French Edition SP2 Microsoft PowerPoint 2003 SP2 + Microsoft Office 2003 SP2 Microsoft PowerPoint 2003 SP1 + Microsoft Office 2003 SP1 Microsoft PowerPoint 2003 0 + Microsoft Office 2003 0 Microsoft PowerPoint 2003 0
Not Vulnerable:

Microsoft PowerPoint Unspecified Code Execution Vulnerability

Microsoft PowerPoint is prone to an unspecified code-execution vulnerability.

A proof-of-concept exploit file designed to trigger this vulnerability has been released. This issue arises when a vulnerable user opens a malicious read-only PowerPoint file and then closes it.

This issue is the third vulnerability discussed in BID 18993 (Microsoft Powerpoint Multiple Unspecified Vulnerabilities). This separate document details further information regarding that issue.

Microsoft PowerPoint 2003 SP2 French Edition is reported vulnerable to this issue; other versions may also be affected.

Microsoft PowerPoint Unspecified Code Execution Vulnerability

A proof-of-concept exploit is available. Symantec has not verified the integrity or functionality of this exploit.

• /data/vulnerabilities/exploits/msppt_exp.c
• /data/vulnerabilities/exploits/powerpoint-3.c

Microsoft PowerPoint Unspecified Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Microsoft PowerPoint Unspecified Code Execution Vulnerability

References:

• Microsoft PowerPoint 2003 SP2 (patched) / Execution of arbitrary code P.o.C. (NSRocket)