Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2006-0009

Description

Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.

POC

Reference

- http://isc.sans.org/diary.php?storyid=1618

- http://www.darkreading.com/document.asp?doc_id=101970

- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-012

Github

No PoCs found on GitHub currently.