National Cyber-Alert System

Vulnerability Summary for CVE-2006-3590

Overview

mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#936945

Name: VU#936945

Hyperlink:http://www.kb.cert.org/vuls/id/936945

US-CERT Technical Alert: TA06-220A

Name: TA06-220A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-220A.html

External Source: XF

Name: powerpoint-mso-code-execution2(27781)

Hyperlink:http://xforce.iss.net/xforce/xfdb/27781

External Source: XF

Name: powerpoint-mso-code-execution(27740)

Hyperlink:http://xforce.iss.net/xforce/xfdb/27740

External Source: BID

Name: 18957

Hyperlink:http://www.securityfocus.com/bid/18957

External Source: BUGTRAQ

Name: 20060718 New PowerPoint Trojan installs itself as LSP

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/440532/100/0/threaded

External Source: BUGTRAQ

Name: 20060716 Several updates in MS PowerPoint 0-day Vulnerability FAQ at SecuriTeam Blogs

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/440255/100/0/threaded

External Source: BUGTRAQ

Name: 20060714 Microsoft PowerPoint 0-day Vulnerability FAQ document written

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/440137/100/0/threaded

External Source: MS

Name: MS06-048

Hyperlink:http://www.microsoft.com/technet/security/Bulletin/MS06-048.mspx

External Source: VUPEN

Name: ADV-2006-2795

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/2795

External Source: SECTRACK

Name: 1016496

Hyperlink:http://securitytracker.com/id?1016496

External Source: MISC

Name: http://securityresponse.symantec.com/avcenter/venc/data/trojan.ppdropper.b.html

Hyperlink:http://securityresponse.symantec.com/avcenter/venc/data/trojan.ppdropper.b.html

External Source: SECUNIA

Name: 21040

Hyperlink:http://secunia.com/advisories/21040

External Source: MISC

Name: http://isc.sans.org/diary.php?storyid=1484

Hyperlink:http://isc.sans.org/diary.php?storyid=1484

External Source: MISC

Name: http://blogs.securiteam.com/?p=508

Hyperlink:http://blogs.securiteam.com/?p=508

External Source: OSVDB

Name: 27324

Hyperlink:http://www.osvdb.org/27324

US Government Resource: oval:org.mitre.oval:def:399

Name: oval:org.mitre.oval:def:399

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:399