Alert GCSA-06047 - Vulnerabilita' in Microsoft PowerPoint

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************
      Alert ID : GCSA-06047
          Data : 17 luglio 2006
        Titolo : Vulnerabilita' in Microsoft PowerPoint
******************************************************************

- - Descrizione del problema

    E' stata rilevata una vulnerabilita' non ancora documentata
    in MS PowerPoint. Tale vulnerabilita' viene attualmente sfruttata
    da un attacco classificato da Symantec come Trojan.PPDropper.B,
    e diffuso attraverso un file di PowerPoint inviato per email.

- - Piattaforme e software interessati

    Microsoft PowerPoint

- - Impatto

    Esecuzione di codice arbitrario.

- - Soluzioni

    Utilizzare un sw AntiVirus aggiornato

- - Riferimenti

    SecurityFocus News - Brief: Targeted attacks using PowerPoint 0-day
    http://www.securityfocus.com/brief/254?ref=rss

    Trojan.PPDropper.B
    http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-071212-4413-99&tabid=2

    SecurityFocus Bugtraq: MS Power Point Multiple Vulnerabilities - (memory corruption) POC
    http://www.securityfocus.com/archive/1/440108

    SecurityFocus Bugtraq: MS Power Point Multiple Vulnerabilities - (mso.dll) POC
    http://www.securityfocus.com/archive/1/440107

    SecurityFocus Bugtraq: MS Power Point Multiple Vulnerabilities (powerpnt.exe)- POC
    http://www.securityfocus.com/archive/1/440106

-----BEGIN PGP SIGNATURE-----

iQCVAwUBRLtlTfOB+SpikaiRAQKrMwP9HiYlG9Rw5cUMZetVWkgbBcntAqsy8YV8
bMkBl0Ho/OwcpZBMuvZ4UlOCNuPCaAu0tn2C/8fi8GTtcGKJ59s+xo093/1uQtrM
u345nSO4eyt60/EfqnQMacx6dqElKN1Roknn5MxldPUr8xAAYeuoQRGmliU03xSN
3qGXmrb23uE=
=s5Da
-----END PGP SIGNATURE-----