Fortinet discovers critical Microsoft vulnerability threatening PowerPoint users

Company Release

New Delhi,June 17

Fortinet – the pioneer and leading provider of multi-threat security solutions – today announced that its leading security research team was key in discovering the latest Microsoft™ critical vulnerability, CVE-2006-0022, which impacts users of several versions of Microsoft PowerPoint™. The vulnerability allows attackers to execute arbitrary code via a Microsoft PowerPoint document and let the attacker take full control of the client workstation. The attacker could then download and install further malicious code and access private user information.

The vulnerability affects users of the following software:

Microsoft Office 2000 Service Pack 3,Microsoft PowerPoint 2000,Microsoft Office XP Service Pack 3

Microsoft PowerPoint 2002,Microsoft Office 2003 Service Pack 1 or Service Pack 2,Microsoft PowerPoint 2003,Microsoft Office 2004 for Mac,Microsoft PowerPoint 2004 for Mac,Microsoft Office v. X for Mac,Microsoft PowerPoint v. X for Mac

Microsoft PowerPoint users should immediately apply the update provided by Microsoft. Fortinet’s security research team was critical in discovering this vulnerability, as noted in the Microsoft Security Bulletin (MailScanner has detected a possible fraud attempt from "maildirect.qlc.co.in" claiming to be http://www.microsoft.com/technet/security/Bulletin/MS06-028.mspx). For more information on this vulnerability, please visit the FortiGuard center at MailScanner has detected a possible fraud attempt from "maildirect.qlc.co.in" claiming to be http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-19.html.

For further information contact:

Media Contact

Sridivya Mukpalkar,

EXL Public Relations,

Email: divya@exlpr.com