Signature Detail

HTTP: Microsoft PowerPoint Presentation Handling Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft PowerPoint. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft PowerPoint is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows a remote attacker to crash the affected application. This issue was first reported as a remote code-execution vulnerability. Microsoft's Secure Windows Initiative is now reporting that this issue is not exploitable for remote code execution. Further research has indicated that the issue is caused by a NULL-pointer dereference that apparently cannot be exploited to execute code, yet can be used to predictably crash the application.

Affected Products

• Microsoft Office 2003 SP1
• Microsoft Office 2003 SP2
• Microsoft Office 2003 SP3
• Microsoft Office 2003
• Microsoft Office 2004 for Mac
• Microsoft PowerPoint 2003 SP1
• Microsoft PowerPoint 2003 SP2
• Microsoft PowerPoint 2003 SP3
• Microsoft PowerPoint 2003

References

• BugTraq: 20495
• CVE: CVE-2006-5296