Signature Detail

HTTP: Microsoft PowerPoint Presentation Handling Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft PowerPoint. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft PowerPoint is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows a remote attacker to crash the affected application. This issue was first reported as a remote code-execution vulnerability. Microsoft's Secure Windows Initiative is now reporting that this issue is not exploitable for remote code execution. Further research has indicated that the issue is caused by a NULL-pointer dereference that apparently cannot be exploited to execute code, yet can be used to predictably crash the application.

Affected Products

• Microsoft office_2003 SP1
• Microsoft office_2003 SP2
• Microsoft office_2003 SP3
• Microsoft office_2003
• Microsoft office_2004_for_mac
• Microsoft powerpoint_2003 SP1
• Microsoft powerpoint_2003 SP2
• Microsoft powerpoint_2003 SP3
• Microsoft powerpoint_2003

References

• BugTraq: 20495
• CVE: CVE-2006-5296