$ cve CVE-2006-5296 JSON

CVE-2006-5296 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 27% (pctl 98)

Patch early

A public exploit exists.

Description

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS	26.98% — more likely to be exploited than 98% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2006-10-16
Last modified	2026-06-16

Affected (1)

Vendor	Product
microsoft	powerpoint

Public exploits

Source	Title	Date
exploit-db	Microsoft Office 2003 - '.PPT' Local Buffer Overflow (PoC)	2006-10-12

References

→ the Explorer · watch your stack · NVD