A vulnerability has been reported in Microsoft PowerPoint 2000, which can be exploited by malicious people to gain knowledge of sensitive information.

The vulnerability is caused due to an error within the interaction between PowerPoint and Internet Explorer when rendering HTML data. This can be exploited to access objects in the Temporary Internet Files Folder (TIFF) explicitly by name on a user's system.

Successful exploitation requires that a user e.g. is tricked into visiting a malicious web site. It is not directly possible to execute code on the system, but it may provide sensitive information that aids in further compromise of the vulnerable system.

Solution
Apply patch.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Yorick Koster, ITsec Security Services.

The vendor also credits Andreas Sandblad for reporting a similar issue.

Changelog
Further details available in Customer Area

Original Advisory
MS06-010 (KB889167):
http://www.microsoft.com/technet/security/Bulletin/MS06-010.mspx

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area