Overview
Microsoft Office applications fail to properly handle PNG images. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system.
Description
Microsoft Office applications fail to properly parse PNG images. When an Office document containing a malformed PNG image is opened with an Office application, system memory can be corrupted in a way that may allow an attacker to execute arbitrary code. More information, including a list of affected Office applications, is available in Microsoft Security Bulletin MS06-039. |
Impact
A remote, unauthenticated attacker may be able to execute arbitrary code. |
Solution
Apply a patch from your vendor |
Do not access Office documents from untrusted sources
|
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This vulnerability was reported in Microsoft Security Bulletin MS06-039. Microsoft credits Fortinet Inc. with providing information regarding this vulnerability.
This document was written by Jeff Gennari.
Other Information
| CVE IDs: | CVE-2006-0033 |
| Severity Metric: | 21.16 |
| Date Public: | 2006-07-11 |
| Date First Published: | 2006-07-11 |
| Date Last Updated: | 2006-07-11 21:10 UTC |
| Document Revision: | 10 |