Exploit for vulnerability in Chinese version of Microsoft PowerPoint

[Symantec]

Exploit for vulnerability in Chinese version of Microsoft PowerPoint
<p>Symantec Security Response is aware of an exploit currently running in the wild on a vulnerability in Microsoft PowerPoint. The exploit targets Chinese language versions of Office 2000 running on Chinese language versions of Windows XP. Thus far, this attack is not widespread and there is no reason to believe it will become more prevalent, based on our experience with similar attacks this year. This is a continuation of the trend (which we have been tracking throughout this year) toward exploiting vulnerabilities in Microsoft Office applications in order to install malware—mainly Trojans.</p>

<p>It is not currently known if other languages or versions are affected by the underlying vulnerability. Symantec has released antivirus definitions that detect this threat as Trojan.PPDropper. All of the normal advice applies here (i.e., don't open attachments from people you don't know or are not expecting them from and keep your antivirus and security solutions up to date).</p>

<p><strong>Update</strong>: It has been reported to Symantec Security Response that the Microsoft PowerPoint vulnerability being exploited may be patched and as such, the content above has been modified accordingly. Currently, the vulnerability is being investigated further and awaiting confirmation.</p>
http://www.symantec.com/enterprise/security_response/weblog/2006/09/exploit_for_unpatched_vulnerab.html
http://www.symantec.com/enterprise/security_response/weblog/2006/09/exploit_for_unpatched_vulnerab.html
Tue, 19 Sep 2006 11:24:00 -0800