Full Disclosure mailing list archives
New information states PowerPoint issue as fixed in MS06-012
From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Tue, 19 Sep 2006 23:46:58 +0300 (EEST)
According to the new information confirmed by Microsoft today recent code execution vulnerability in PowerPoint is not 0-day issue, it is fixed in MS06-012: http://www.microsoft.com/technet/security/bulletin/MS06-012.mspx It appears that several sources delivered "erroneous" information pointing to undocumented and 0-day type vulnerability. In fact, this information was unconfirmed. Many things can happen in three or four hours. CVE project has reportedly updated the recent CVE document CVE-2006-4854 (accessible via http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4854 ). FAQ document Microsoft PowerPoint 0-day Vulnerability FAQ - September 2006, CVE-2006-4854 is updated to include new information and word '0-day' has been removen from the title: http://blogs.securiteam.com/?p=620 Systems without MS06-012 patch are in danger still. - Juha-Matti _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- New information states PowerPoint issue as fixed in MS06-012 Juha-Matti Laurio (Sep 19)