CVE-2006-5296
4.3
CVSS v2.0 Base Score
67.84%
MEDIUM RiskEPSS (99th percentile)
NVD-CWE-Other
PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.
Published: 10/16/2006
Modified: 4/23/2026
Vulnerability Summary
CVSS v2 Score
4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS Score (Exploitation Probability)
67.84%MEDIUM Exploitation Risk
99th percentile
This vulnerability has a 67.84% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other