CVE-2006-4694: Code Injection
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and Exploit-PPT.d/Trojan.PPDropper.F. NOTE: it has been reported that the attack vector involves SlideShowWindows.View.GotoNamedShow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4694?
CVE-2006-4694 is classified as a critical vulnerability due to its potential to allow arbitrary code execution.
How do I fix CVE-2006-4694?
To fix CVE-2006-4694, it is recommended to apply the latest security updates provided by Microsoft for affected versions of Office.
Which versions of Microsoft Office are affected by CVE-2006-4694?
CVE-2006-4694 affects Microsoft Office 2000, Office XP (SP1 and SP2), and Office 2003.
How can attackers exploit CVE-2006-4694?
Attackers can exploit CVE-2006-4694 by using specially crafted PPT files to execute arbitrary code when the file is opened.
What are some malware examples exploiting CVE-2006-4694?
Malware such as Exploit:Win32/Controlppt.W and Exploit:Win32/Controlppt.X utilize CVE-2006-4694 for exploitation.