Signature Detail

HTTP: Microsoft Office PNG Image Filter Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Office. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Office is prone to a remote code-execution vulnerability when handling a malformed PNG graphic file. The issue occurs when an Office application such as Excel, Word, or PowerPoint tries to open a malformed PNG graphic file. An attacker could exploit this vulnerability to cause memory corruption and subsequently to execute malicious code in the context of the user running the affected application.

Affected Products

• Microsoft office_2000 SP1
• Microsoft office_2000 SP2
• Microsoft office_2000 SP3
• Microsoft office_2000
• Microsoft office_2000_chinese_version
• Microsoft office_2000_japanese_version
• Microsoft office_2000_korean_version
• Microsoft office_2003 SP1
• Microsoft office_2003 SP2
• Microsoft office_2003 SP3
• Microsoft office_2003
• Microsoft office_xp SP1
• Microsoft office_xp SP2
• Microsoft office_xp SP3
• Microsoft office_xp
• Microsoft project_2000
• Microsoft project_2002 SP1
• Microsoft project_2002

References

• BugTraq: 18913
• CVE: CVE-2006-0033