CVE-2006-3590

mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.

Published: 2006-07-14 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2006-3590 is rated Moderate Risk (49.4/100): CVSS Medium severity, with high exploitation likelihood (EPSS 36.12%, 97th percentile). Core evidence: EPSS ranks this CVE among the most likely to be exploited in the near term. Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2006-3590

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-04-11 42.59% 36.12% -6.47%
2 2025-08-03 41.59% 42.59% +1.01%
3 2025-03-30 41.59%

Full EPSS history (15 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2006-3590

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.1 2.0 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:H)
Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
4.9 6.4 [email protected]

Weakness enumeration for CVE-2006-3590

Affected software / configurations for CVE-2006-3590

Vendor Product Version Raw CPE
microsoft powerpoint 2000 cpe:2.3:a:microsoft:powerpoint:2000:*:*:*:*:*:*:*
microsoft powerpoint 2002 cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*
microsoft powerpoint 2003 cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*
microsoft powerpoint 2003 cpe:2.3:a:microsoft:powerpoint:2003:sp1:*:*:*:*:*:*
microsoft powerpoint 2003 cpe:2.3:a:microsoft:powerpoint:2003:sp2:*:*:*:*:*:*

References for CVE-2006-3590

URL Tags
http://blogs.securiteam.com/?p=508
http://isc.sans.org/diary.php?storyid=1484
http://secunia.com/advisories/21040 Vendor Advisory
http://securityresponse.symantec.com/avcenter/venc/data/trojan.ppdropper.b.html
http://securitytracker.com/id?1016496
http://www.kb.cert.org/vuls/id/936945 US Government Resource
http://www.osvdb.org/27324
http://www.securityfocus.com/archive/1/440137/100/0/threaded
http://www.securityfocus.com/archive/1/440255/100/0/threaded
http://www.securityfocus.com/archive/1/440532/100/0/threaded
http://www.securityfocus.com/bid/18957
http://www.us-cert.gov/cas/techalerts/TA06-220A.html US Government Resource
http://www.vupen.com/english/advisories/2006/2795 Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048
https://exchange.xforce.ibmcloud.com/vulnerabilities/27740
https://exchange.xforce.ibmcloud.com/vulnerabilities/27781
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A399
cvelogic Threat Intelligence