CVE:CVE-2006-3877
CNNVD:CNNVD-200610-128
PowerPoint是非常流行的电子文稿演示工具。
PowerPoint的实现在处理畸形记录时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。
当PowerPoint处理畸形记录时可能触发一个非授权内存访问，攻击者可能利用此漏洞。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。
solution:Upgrade microsoft access to a higher version than 2000,2002,2003,and avoid the version 2000,2002,2003; Upgrade microsoft excel to a higher version than 2000,2002,2003,and avoid the version 2000,2002,2003; Upgrade microsoft excel_viewer to a higher version than 2003,and avoid the version 2003; Upgrade microsoft frontpage to a higher version than 2000,2002,2003,and avoid the version 2000,2002,2003; Upgrade microsoft infopath to a higher version than 2003,and avoid the version 2003; Upgrade microsoft office to a higher version than 2000:sp3,2003:sp2,2004,xp:sp3,and avoid the version 2000:sp3,2003:sp2,2004,xp:sp3; Upgrade microsoft onenote to a higher version than 2003,and avoid the version 2003; Upgrade microsoft outlook to a higher version than 2000,2002,2003,and avoid the version 2000,2002,2003; Upgrade microsoft powerpoint to a higher version than 2000,2002,2003,2004,and avoid the version 2000,2002,2003,2004; Upgrade microsoft project to a higher version than 2000:sr1,2002:sp1,2003,and avoid the version 2000:sr1,2002:sp1,2003; Upgrade microsoft publisher to a higher version than 2000,2002,2003,and avoid the version 2000,2002,2003; Upgrade microsoft visio to a higher version than 2002:sp2,2003,and avoid the version 2002:sp2,2003; Upgrade microsoft word to a higher version than 2000,2002,2003,and avoid the version 2000,2002,2003; Upgrade microsoft word_viewer to a higher version than 2003,and avoid the version 2003