NVD

Id
63899  
Name
CVE-2006-5296  
Description
PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2006-10-16  
Modified Date
2011-03-07  
Seq
2006-5296  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333067 63899 CVE-2006-5296 http://blogs.technet.com/msrc/archive/2006/10/12/poc-published-for-ms-office-2003-powerpoint.aspx  View
333068 63899 CVE-2006-5296 http://blogs.technet.com/msrc/archive/2006/11/10/follow-up-information-on-weblog-posting-about-poc-published-for-ms-office-2003-powerpoint.aspx  View
333069 63899 CVE-2006-5296 2523  View
333070 63899 CVE-2006-5296 http://research.eeye.com/html/alerts/zeroday/20061012_2.html  View
333071 63899 CVE-2006-5296 1017059  View
333072 63899 CVE-2006-5296 http://www.informationweek.com/management/showArticle.jhtml?articleID=193302553  View
333073 63899 CVE-2006-5296 20495  View
333074 63899 CVE-2006-5296 ADV-2006-4031  View
333075 63899 CVE-2006-5296 powerpoint-presentation-bo(29507)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59990 JVNDB-2006-002256 Microsoft Office 2003 の PowerPoint におけるサービス運用妨害 (DoS) の脆弱性 Microsoft Office 2003 の PowerPoint は、ポジション値がレコード長を超えるコンテナオブジェクトを適切に処理しないため、サービス運用妨害 (NULL デリファレンスおよびアプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2006-5296 21398 CVE-2006-5296 63899 4.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002256.html 2006-10-16 2012-09-25 View