Wednesday, February 14, 2007 8:33 AM
cmosby
McAfee Avert Labs Blog - PowerPoint Version of (just patched) Office Zero-Day Spotted
PowerPoint Version of (just patched) Office Zero-Day Spotted
Tuesday February 13, 2007 at 9:08 pm CST
Posted by Craig Schmugar
Trackback
Earlier today Symantec posted a description for Trojan.PPDropper.G. The vulnerability mentioned in the description has been assigned CVE-2007-0913. SANS added it to their missing Microsoft patches table.
However, McAfee Avert Labs’ testing shows this issue was patched today in MS07-015 along with the Office Zero-Day reported by McAfee on February 2 (CVE-2007-0671). This testing suggests Trojan.PPDropper.G may in fact be a PowerPoint version of the Office zero-day exploit used in Exploit-MSExcel.h.
We will post an update when we have more definitive information.