NetSight
IP …
medium5.1

CVE-2006-0009

Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing s…

Impact

Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.

Affected products

VendorProductAffected versions
MicrosoftOffice
Versions 2000, 2003, 2004, v.x, xp
MicrosoftWorks
Versions 2000, 2001, 2002, 2003, 2004, 2005

References