Description
Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3656, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft PowerPoint 2003 - 'mso.dll' '.PPT' Processing Code Execution EDB-28224 · remote · Jul 14, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 21061 third-party-advisory
- 20060718 About the latest three Powerpoint vulnerabilities: exploitable? mailing-list
- 27325 vdb-entry
- ADV-2006-2815 vdb-entry
- powerpoint-mso-code-execution2(27781) vdb-entry
- 20060717 New CVE identifiers for separate PowerPoint 0-day issues assigned mailing-list
- 18993 vdb-entry
- 20060715 MS Power Point Multiple Vulnerabilities - (mso.dll) POC mailing-list