PT-2006-1105 · Microsoft · Office+4

Ollie Whitehouse · Published 2006-03-14 · Updated 2018-10-19 · CVE-2006-0009

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2000 SP3 through XP SP3

Description: A remote code execution issue exists, allowing attackers to execute arbitrary code via a specially crafted routing slip within an Office document. This could enable an attacker to take complete control of the affected system. The issue has been exploited by malware in attacks against PowerPoint.

Recommendations: For Microsoft Office versions 2000 SP3 through XP SP3, consider disabling the routing slip feature until a patch is available to prevent exploitation. Restrict access to Office documents from untrusted sources to minimize the risk of remote code execution.

Fix

Related Identifiers

CVE-2006-0009

Affected Products

Office

Office Excel

Office Powerpoint

Office Word

Outlook

References · 54

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0009 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-0009 · Security Note
• http://secunia.com/advisories/19138 · Vendor Advisory
• http://securityfocus.com/bid/17000 · Patch
• http://securitytracker.com/id?1015766 · Patch
• http://blogs.securiteam.com/?p=559 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0597.html · Note
• http://securityfocus.com/archive/1/443890/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25009 · Note
• http://trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FMDROPPER%2EBH · Note
• http://vupen.com/english/advisories/2006/3678 · Note
• http://blogs.securiteam.com/?p=557 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:798 · Note
• http://frsirt.com/english/advisories/2006/3678 · Note