Vulnerability Details : CVE-2006-3590

mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.

Vulnerability category: Memory Corruption

Published 2006-07-14 18:05:00

Updated 2018-10-18 16:48:07

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-3590

Probability of exploitation activity in the next 30 days: 47.76%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2006-3590

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
5.1	MEDIUM	AV:N/AC:H/Au:N/C:P/I:P/A:P	4.9	6.4	[email protected]
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2006-3590

Products affected by CVE-2006-3590

Microsoft » Powerpoint » Version: 2000
cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*
Matching versions
Microsoft » Powerpoint » Version: 2003
cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Powerpoint » Version: 2002
cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*
Matching versions
Microsoft » Powerpoint » Version: 2003 Update SP2
cpe:2.3:a:microsoft:powerpoint:2003:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Powerpoint » Version: 2003 Update SP1
cpe:2.3:a:microsoft:powerpoint:2003:sp1:*:*:*:*:*:*
Matching versions