CVE-2006-5296

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted…

published October 16, 2006

CVSS
—
EPSS
27%
Percentile
98.0
In the wild
Unconfirmed
What it is

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.26983 · 98.0th percentile
Published
2006-10-16T19:00Z
EPSS history
Timeline
  • 16 OCT 19:00Z
    PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted…
    cvelistv5