Technical intelligence and weaponization dossier for CVE-2006-4704. Documented exploitation across 1 active malware families totaling 1 analyzed telemetry samples.
| Vulnerability ID | CVE-2006-4704 |
|---|---|
| Common Name / Bulletin | Microsoft PowerPoint Embedded Font Rendering Buffer Overflow (MS06-058) |
| CWE Classification | CWE-119: Memory Corruption in Presentation Graphics Engine |
| Affected Software & Versions | Microsoft Office 2000, XP, 2003 |
| Technical Root Cause | Memory corruption in PowerPoint font engine while handling specially crafted embedded fonts in presentations, exploited in targeted phishing lures by Storm Worm botnet distributors. |
| Associated ATT&CK Techniques |
Empirical catalog telemetry verifies that the following 1 malware families weaponize this vulnerability for initial access, privilege escalation, or lateral movement:
Threat intelligence confirms the following adversaries weaponize CVE-2006-4704 in enterprise intrusions and campaign toolkits:
Threat hunting leads and behavioral telemetry patterns to identify weaponized exploitation of CVE-2006-4704 in enterprise networks:
PowerPnt.exe opening attachment from Outlook temporary folders followed by creation of hidden system services or registry Run key entries.SOC containment checklist and attack surface reduction measures to neutralize exploitation:
For end-to-end incident response procedures, consult our dedicated playbook: Botnet Protection & Remediation →