First published: Tue Oct 10 2006(Updated: )
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Office FrontPage | =2003 | |
Microsoft Project Professional | =2002-sp1 | |
Microsoft Access | =2000 | |
Microsoft Outlook | =2000 | |
Microsoft PowerPoint | =2000 | |
Microsoft Project Professional | =2003 | |
Microsoft Office | =2004 | |
Microsoft Excel for Mac | =2000 | |
Microsoft Publisher | =2000 | |
Microsoft Word for Android | =2000 | |
Microsoft Access | =2002 | |
Microsoft PowerPoint | =2002 | |
Microsoft Office | =xp-sp3 | |
Microsoft Outlook | =2003 | |
Microsoft PowerPoint | =2003 | |
Microsoft Office | =2003-sp2 | |
Microsoft InfoPath | =2003 | |
Microsoft Publisher | =2002 | |
Microsoft Office FrontPage | =2002 | |
Microsoft Excel Viewer | =2003 | |
Microsoft Word for Android | =2003 | |
Microsoft Excel for Mac | =2002 | |
Microsoft Visio Professional | =2002-sp2 | |
Microsoft Access | =2003 | |
Microsoft Project Professional | =2000-sr1 | |
Microsoft Publisher | =2003 | |
Microsoft OneNote for Mac | =2003 | |
Microsoft Word for Android | =2002 | |
Microsoft Word Viewer | =2003 | |
Microsoft Office FrontPage | =2000 | |
Microsoft Visio Professional | =2003 | |
Microsoft Excel for Mac | =2003 | |
Microsoft Outlook | =2002 | |
Microsoft PowerPoint | =2004 | |
Microsoft Office | =2000-sp3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-3877 is considered to have a high severity as it may allow attackers to execute arbitrary code on affected systems.
To remediate CVE-2006-3877, users should apply the latest patches and updates provided by Microsoft for the affected Office products.
CVE-2006-3877 affects Microsoft Office 2000, 2002, 2003, and specific versions for Mac including Office 2004.
CVE-2006-3877 enables user-assisted attacks potentially resulting in the execution of malicious code when opening crafted files.
Yes, CVE-2006-3877 is a different vulnerability compared to CVE-2006-3435 and CVE-2006-4694, which also affect Microsoft Office products.