CVE-2006-5296 Null dereference in n/a

What is CVE-2006-5296?

CVE-2006-5296 is a medium-severity vulnerability in Microsoft Powerpoint, published on 16 Oct 2006. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.

Which versions are affected by CVE-2006-5296?

It affects 1 product.

Products include Microsoft Powerpoint.

How do I fix CVE-2006-5296?

No fix has been published for CVE-2006-5296 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-5296 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2006-5296 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Microsoft Powerpoint

• CVE-2010-2572 Microsoft PowerPoint Buffer Overflow Exploited High 7.8
• CVE-2011-3396 Path traversal in n/a Critical 9.3
• CVE-2011-1270 Memory corruption in n/a Critical 9.3
• CVE-2011-0976 Memory corruption in n/a Critical 9.3
• CVE-2010-3141 Path traversal in n/a Critical 9.3

All Microsoft Powerpoint vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4qf8-jx39-2cv9.