Description
Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft PowerPoint 2003 - '.ppt' File Closure Memory Corruption EDB-28226 · remote · Jul 14, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 21061 third-party-advisory
- 20060718 About the latest three Powerpoint vulnerabilities: exploitable? mailing-list
- powerpoint-unspecified-memory-corruption(27782) vdb-entry
- http://downloads.securityfocus.com/vulnerabilities/exploits/PP2003sp2patched_fr_exploit-method.txt
- 19229 vdb-entry
- ADV-2006-2815 vdb-entry
- http://packetstormsecurity.org/0607-exploits/mspp-poc3.txt
- powerpoint-mso-code-execution2(27781) vdb-entry
- 20060717 New CVE identifiers for separate PowerPoint 0-day issues assigned mailing-list
- 20060715 MS Power Point Multiple Vulnerabilities - (memory corruption) POC mailing-list
- 18993 vdb-entry