Microsoft Powerpoint Remote Code Execution Vulnerability

Bugtraq ID:	19341
Class:	Boundary Condition Error
CVE:	CVE-2006-3449
Remote:	Yes
Local:	No
Published:	Aug 08 2006 12:00AM
Updated:	Aug 24 2006 08:49PM
Credit:	Shih-hao Weng of Information & Communication Security Technology Center has been credited with the discovery of this vulnerability.
Vulnerable:	Microsoft PowerPoint 2004 for Mac 0 Microsoft PowerPoint 2003 SP2 + Microsoft Office 2003 SP2 Microsoft PowerPoint 2003 SP1 + Microsoft Office 2003 SP1 Microsoft PowerPoint 2002 SP3 Microsoft PowerPoint 2000 SP3 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional
Not Vulnerable:

Microsoft Powerpoint Remote Code Execution Vulnerability

Microsoft PowerPoint is prone to a remote code-execution vulnerability.

This issue occurs when the application handles malformed record data within a presentation file.

A successful exploit of this issue will let attackers execute arbitrary code in the context of the targeted user.

Microsoft Powerpoint Remote Code Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Powerpoint Remote Code Execution Vulnerability

Solution:
Microsoft has released a security bulletin to address this issue. Please see the attached security bulletin for details on obtaining fixes.


Microsoft PowerPoint 2004 for Mac 0

• Microsoft Microsoft Office 2004 for Mac 11.2.6 Update
  http://download.microsoft.com/download/1/2/4/12449c3e-3871-4534-b4c9-a 4a56900c5fd/Office2004-1126UpdateEN.dmg


• Microsoft Microsoft Office v. X for Mac Security Update
  http://download.microsoft.com/download/E/6/7/E67E3229-CA3F-40A4-9583-5 F0870200FE9/OfficeX-SecUpdate0608EN.dmg

Microsoft Powerpoint Remote Code Execution Vulnerability

References:

• Microsoft PowerPoint Homepage (Microsoft)
  
• Microsoft Security Bulletin MS06-048 (Microsoft)
  
• Microsoft PowerPoint Malformed Record Memory Corruption ([email protected])