funsec mailing list archives
New information states PowerPoint issue as fixed in MS06-012
From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Tue, 19 Sep 2006 23:50:16 +0300 (EEST)
According to the new information confirmed by Microsoft today recent code execution vulnerability in PowerPoint is not 0-day issue, it is fixed in MS06-012: http://www.microsoft.com/technet/security/bulletin/MS06-012.mspx It appears that several sources delivered "erroneous" information pointing to undocumented and 0-day type vulnerability. In fact, this information was unconfirmed. Many things can happen in three or four hours. CVE project has reportedly updated the recent CVE document CVE-2006-4854 (accessible via http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4854 ). FAQ document Microsoft PowerPoint 0-day Vulnerability FAQ - September 2006, CVE-2006-4854 is updated to include new information and word '0-day' has been removen from the title: http://blogs.securiteam.com/?p=620 Systems without MS06-012 patch are in danger still. - Juha-Matti _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- New information states PowerPoint issue as fixed in MS06-012 Juha-Matti Laurio (Sep 19)