Unscored severity · published Jul 14, 2006
CVE-2006-3590
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads…
–
CVSS
14.3%
EPSS
No
On KEV
Description
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.3% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Powerpoint · Microsoft
2000; 2002; 2003; 2003; 2003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3590
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3590
blogs.securiteam.com
http://blogs.securiteam.com/?p=508
isc.sans.org
http://isc.sans.org/diary.php?storyid=1484
Vendor Advisory
http://secunia.com/advisories/21040
securityresponse.symantec.com
http://securityresponse.symantec.com/avcenter/venc/data/trojan.ppdropper.b.html
securitytracker.com
http://securitytracker.com/id?1016496
US Government Resource
http://www.kb.cert.org/vuls/id/936945
More from Powerpoint
8.8
CVE-2015-2424
Microsoft PowerPoint Memory Corruption Vulnerability
8.8
CVE-2009-0556
Microsoft Office PowerPoint Code Injection Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.8
CVE-2010-2572
Microsoft PowerPoint Buffer Overflow Vulnerability
9.1
CVE-2024-39804
A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS