Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2006-3590
HistoryJul 14, 2006 - 6:05 p.m.

CVE-2006-3590

2006-07-1418:05:00
[email protected]
web.nvd.nist.gov
25
cve-2006-3590
mso.dll
microsoft powerpoint
memory corruption
user-assisted
trojan.ppdropper.b

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.455 Medium

EPSS

Percentile

97.4%

JSON

mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.

Affected configurations

NVD
Node
microsoftpowerpointMatch2000
OR
microsoftpowerpointMatch2002
OR
microsoftpowerpointMatch2003
OR
microsoftpowerpointMatch2003sp1
OR
microsoftpowerpointMatch2003sp2

Related

nvd 7
cvelist 7
cert 2
nessus 3
securityvulns 4
cve 6
checkpoint_advisories 4
prion 1
nvd
nvd
CVE-2006-3590
2006-07-14 18:05:00
CVE-2006-3655
2006-07-18 15:47:00
CVE-2006-3656
2006-07-18 15:47:00
cvelist
cvelist
CVE-2006-3590
2006-07-14 18:00:00
CVE-2006-3660
2006-07-17 19:00:00
CVE-2006-3656
2006-07-17 19:00:00
cert
cert
Microsoft PowerPoint does not properly handle malformed shapes
2006-07-14 00:00:00
Microsoft Office string parsing vulnerability
2006-07-11 00:00:00
nessus
nessus
MS06-048: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922968)
2006-08-08 00:00:00
MS06-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (917284)
2006-07-11 00:00:00
MS06-037 / MS06-038: Vulnerabilities in Microsoft Excel and Office Could Allow Remote Code Execution (917284 / 917285) (Mac OS X)
2006-07-11 00:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS06-048 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922968)
2006-08-08 00:00:00
SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability
2006-07-11 00:00:00
SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability
2006-07-11 00:00:00
cve
cve
CVE-2006-3655
2006-07-18 15:47:00
CVE-2006-3656
2006-07-18 15:47:00
CVE-2006-3660
2006-07-18 15:47:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office File Malformed String Parsing Buffer Overflow(MS06-038; CVE-2006-1540)
2011-05-17 00:00:00
Microsoft Office File Malformed String Parsing Buffer Overflow (MS06-038) - ver 2 (CVE-2006-1540)
2011-05-17 00:00:00
Microsoft Word mso.dll LsCreateLine Memory Corruption (CVE-2006-3493)
2011-05-24 00:00:00
prion
prion
Integer overflow
2006-03-30 11:02:00

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.455 Medium

EPSS

Percentile

97.4%

JSON
Related for CVE-2006-3590
nvd7cvelist7cert2nessus3securityvulns4cve6checkpoint_advisories4prion1