CVE-2006-0009 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-0009
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-0009

Description: Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/25009 http://xforce.iss.net/xforce/xfdb/29009 ST 1015766 1016720 1016886 SAID Secunia Advisory: SA19138 Secunia Advisory: SA19238 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1553 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1504 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1653 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:798 OSVDB 23903 MS http://www.microsoft.com/technet/security/bulletin/ms06-012.mspx MISC http://www.darkreading.com/document.asp?doc_id=101970 http://www.symantec.com/security_response/writeup.jsp?docid=2006-091810-5028-99 http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FMDROPPER%2EBH http://blogs.securiteam.com/?author=28 http://isc.sans.org/diary.php?storyid=1618 http://blogs.securiteam.com/?p=557 http://blogs.securiteam.com/?p=559 http://www.symantec.com/enterprise/research/SYMSA-2006-001.txt FULLDISC http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049540.html http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.html CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm CERT-VN 682820 CERT http://www.us-cert.gov/cas/techalerts/TA06-073A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/443890/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/432004/30/5340/threaded http://www.securityfocus.com/archive/1/archive/1/446370/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/446425/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/444051/100/200/threaded http://www.securityfocus.com/archive/1/archive/1/427671/100/0/threaded BID 17000 20059

Return to the previous page.