[Full-disclosure] New information states PowerPoint issue as fixed in MS06-012

[Juha-Matti Laurio <juha-matti.laurio@xxxxxxxx>]

According to the new information confirmed by Microsoft today recent code 
execution vulnerability in PowerPoint is not 0-day issue,
it is fixed in MS06-012:
http://www.microsoft.com/technet/security/bulletin/MS06-012.mspx

It appears that several sources delivered "erroneous" information pointing to 
undocumented and 0-day type vulnerability.
In fact, this information was unconfirmed.
Many things can happen in three or four hours.

CVE project has reportedly updated the recent CVE document CVE-2006-4854
(accessible via http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4854 ).

FAQ document Microsoft PowerPoint 0-day Vulnerability FAQ - September 2006, 
CVE-2006-4854
is updated to include new information and word '0-day' has been removen from 
the title:
http://blogs.securiteam.com/?p=620

Systems without MS06-012 patch are in danger still.
 
- Juha-Matti

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/