Nanika

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer version 9 **Description** A use-after-free issue allows remote attackers to execute arbitrary code via a crafted web site. The vulnerability may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. This issue is related to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. **Recommendations** For Microsoft Internet Explorer version 9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.

**Name of the Vulnerable Software and Affected Versions** Windows Explorer (explorer.exe) versions on Windows XP and 2003 **Description** The issue allows user-assisted attackers to cause a denial of service, potentially leading to repeated crashes, and may also enable the execution of arbitrary code. This is achieved through a .url file containing an InternetShortcut tag with a long URL and a large number of "file:" specifiers. **Recommendations** For Windows XP and 2003, avoid using .url files with long URLs and multiple "file:" specifiers in the InternetShortcut tag until a fix is available. As a temporary workaround, consider restricting the use of .url files with InternetShortcut tags to minimize the risk of exploitation.