PT-2006-1100 · Microsoft · Office 2000 Sp3+3

Andreas Sandblad + 1 · Publicado 2006-02-14 · Atualizado 2018-10-12 · CVE-2006-0004

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint 2000 in Office 2000 SP3

Description: The issue is related to an interaction between Microsoft PowerPoint 2000 and Internet Explorer, allowing remote attackers to obtain sensitive information. This occurs when a PowerPoint presentation attempts to access objects in the Temporary Internet Files Folder (TIFF).

Recommendations: For Microsoft PowerPoint 2000 in Office 2000 SP3, consider restricting access to the Temporary Internet Files Folder to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0004

Produtos afetados

Internet Explorer

Powerpoint 2000

Office 2000 Sp3

Office Powerpoint

Referências · 14

• http://frsirt.com/english/advisories/2006/0579 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1555 · Nota
• http://kb.cert.org/vuls/id/963628 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-010 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24490 · Nota
• http://securityfocus.com/bid/16634 · Nota
• http://xforce.iss.net/xforce/xfdb/24490 · Nota
• http://vupen.com/english/advisories/2006/0579 · Nota
• http://secunia.com/advisories/18865 · Nota
• http://securitytracker.com/id?1015632 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0004 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2006-0004 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-010 · Nota
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1555 · Nota