PT-2006-1100 · Microsoft · Office 2000 Sp3+3

Andreas Sandblad + 1 · Published 2006-02-14 · Updated 2018-10-12 · CVE-2006-0004

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint 2000 in Office 2000 SP3

Description: The issue is related to an interaction between Microsoft PowerPoint 2000 and Internet Explorer, allowing remote attackers to obtain sensitive information. This occurs when a PowerPoint presentation attempts to access objects in the Temporary Internet Files Folder (TIFF).

Recommendations: For Microsoft PowerPoint 2000 in Office 2000 SP3, consider restricting access to the Temporary Internet Files Folder to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0004

Affected Products

Internet Explorer

Powerpoint 2000

Office 2000 Sp3

Office Powerpoint

References · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-010 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0004 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-0004 · Security Note
• http://frsirt.com/english/advisories/2006/0579 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1555 · Note
• http://kb.cert.org/vuls/id/963628 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24490 · Note
• http://securityfocus.com/bid/16634 · Note
• http://xforce.iss.net/xforce/xfdb/24490 · Note
• http://vupen.com/english/advisories/2006/0579 · Note
• http://secunia.com/advisories/18865 · Note
• http://securitytracker.com/id?1015632 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/ms06-010 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1555 · Note