CVE-2006-3449

Published: Aug 9, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF file format used in a PPT file, a different issue than CVE-2006-1540, aka "Microsoft PowerPoint Malformed Record Vulnerability."

Affected (13)

Products: Microsoft: Powerpoint

1 product

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Microsoft Powerpoint	Version 2000
Microsoft Powerpoint	Version 2000
Microsoft Powerpoint	Version 2000
Microsoft Powerpoint	Version 2000
Microsoft Powerpoint	Version 2000 sp2
Microsoft Powerpoint	Version 2000 sp3
Microsoft Powerpoint	Version 2000 sr1
Microsoft Powerpoint	Version 2001
Microsoft Powerpoint	Version 2002
Microsoft Powerpoint	Version 2002 sp1
Microsoft Powerpoint	Version 2002 sp2
Microsoft Powerpoint	Version 2002 sp3
Microsoft Powerpoint	Version 2003

References (18)

http://securityreason.com/securityalert/1342

Source: secure@microsoft.com

Third Party Advisory

http://securitytracker.com/id?1016657

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

http://secway.org/advisory/AD20060808.txt

Source: secure@microsoft.com

Not Applicable

http://www.kb.cert.org/vuls/id/884252

Source: secure@microsoft.com

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/archive/1/442592/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/19341

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA06-220A.html

Source: secure@microsoft.com

PatchThird Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A348

Source: secure@microsoft.com

Third Party Advisory

http://securityreason.com/securityalert/1342

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://securitytracker.com/id?1016657

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://secway.org/advisory/AD20060808.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Not Applicable

http://www.kb.cert.org/vuls/id/884252

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/archive/1/442592/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19341

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA06-220A.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A348

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.