CVE-2006-3590
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to...
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
Exploit likelihood
What each source reports
NVD Score used
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
- Record
CVE-2006-3590- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
- Record
CVE-2006-3590- Updated
- 2026-11-02
EUVDEUVD-2006-3585 No score
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
- Record
EUVD-2006-3585- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rh8h-gpvg-vg6q No score
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to...
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.
- Record
GHSA-rh8h-gpvg-vg6q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3590 is a medium vulnerability (CVSS 5.1) in Microsoft Powerpoint, published July 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.3%, the 96th percentile. No source names a fixed version.
References
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048
secunia.com/advisories/21040
isc.sans.org/diary.php?storyid=1484
securityresponse.symantec.com/avcenter/venc/data/trojan.ppdropper.b.html
blogs.securiteam.com?p=508
securityfocus.com/archive/1/440532/100/0/threaded
Show 13 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/27781
us-cert.gov/cas/techalerts/TA06-220A.html
vupen.com/english/advisories/2006/2795
securitytracker.com/id?1016496
kb.cert.org/vuls/id/936945
osvdb.org/27324
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A399
nvd.nist.gov/vuln/detail/CVE-2006-3590
github.com/advisories/GHSA-rh8h-gpvg-vg6q