Description
Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590, although it is possible that they are all different.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft PowerPoint 2003 - 'powerpnt.exe' Remote Overflow EDB-28225 · remote · Jul 14, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20060715 MS Power Point Multiple Vulnerabilities (powerpnt.exe)- POC mailing-list
- 21061 third-party-advisory
- 20060718 About the latest three Powerpoint vulnerabilities: exploitable? mailing-list
- powerpoint-powerpnt-unspecified(27783) vdb-entry
- ADV-2006-2815 vdb-entry
- 20060717 New CVE identifiers for separate PowerPoint 0-day issues assigned mailing-list
- 18993 vdb-entry