PT-2006-6756 · Microsoft+1 · Office Powerpoint+1
Kees Cook
·
Publicado
2006-12-03
·
Atualizado
2018-10-17
·
CVE-2006-6120
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
KOffice versions prior to 1.6.1
Description
The issue is related to an integer overflow in the KPresenter import filter for Microsoft PowerPoint files. This allows user-assisted remote attackers to execute arbitrary code via a crafted PPT file, resulting in a heap-based buffer overflow.
Recommendations
For versions prior to 1.6.1, update to version 1.6.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the KPresenter import filter for Microsoft PowerPoint files until the update is applied. Restrict access to potentially malicious PPT files to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Office
Office Powerpoint