PT-2006-6756 · Microsoft+1 · Office Powerpoint+1

Kees Cook · Published 2006-12-03 · Updated 2018-10-17 · CVE-2006-6120

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions KOffice versions prior to 1.6.1

Description The issue is related to an integer overflow in the KPresenter import filter for Microsoft PowerPoint files. This allows user-assisted remote attackers to execute arbitrary code via a crafted PPT file, resulting in a heap-based buffer overflow.

Recommendations For versions prior to 1.6.1, update to version 1.6.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the KPresenter import filter for Microsoft PowerPoint files until the update is applied. Restrict access to potentially malicious PPT files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-6120

RHSA-2007:0010

Affected Products

Office

Office Powerpoint

References · 19

• http://security.gentoo.org/glsa/glsa-200612-05.xml · Vendor Advisory
• http://secunia.com/advisories/23143 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0010.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:222 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_29_sr.html · Vendor Advisory
• http://secunia.com/advisories/23162 · Vendor Advisory
• http://websvn.kde.org/branches/koffice/1.6/koffice/filters/olefilters/lib/klaola.cc?rev=607037&r1=566347&r2=607037 · Vendor Advisory
• http://securityfocus.com/bid/21354 · Vendor Advisory
• http://koffice.org/announcements/changelog-1.6.1.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6120 · Security Note
• http://ubuntu.com/usn/usn-388-1 · Vendor Advisory
• http://secunia.com/advisories/24218 · Note
• http://secunia.com/advisories/23409 · Note
• http://securityfocus.com/archive/1/453550/100/0/threaded · Note
• http://securitytracker.com/id?1017318 · Note