Vulnerability Bulletins |
Revelación de información en Microsoft PowerPoint 2000 |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Confidencialidad |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio exotico |
System information |
|
| Property | Value |
| Affected manufacturer | Microsoft |
| Affected software | Microsoft Office 2000 SP3 / PowerPoint 2000 |
Description |
|
|
Se ha descubierto una vulnerabilidad en Microsoft PowerPoint 2000. La vulnerabilidad reside en la interacción de este producto con Internet Explorer que permite acceder a objetos de la carpeta Temporary Internet Files Folder (TIFF). Un atacante remoto podría obtener información sensible mediante una presentación PowerPoint especialmente diseñada. |
|
Solution |
|
|
Actualización de software Microsoft Microsoft Office 2000 SP3 / PowerPoint 2000 http://www.microsoft.com/downloads/details.aspx?familyid=E51B27C8-2F31-4E99-B868-CE626FED5B7D |
|
Standar resources |
|
| Property | Value |
| CVE | CVE-2006-0004 |
| BID | |
Other resources |
|
|
Microsoft Security Bulletin (MS06-010) http://www.microsoft.com/technet/security/Bulletin/MS06-010.mspx Microsoft Security Bulletin (MS06-028) http://www.microsoft.com/technet/security/Bulletin/MS06-028.mspx |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2006-02-15 |
| 1.1 | Aviso emitido por Microsoft (MS06-028) | 2006-06-23 |