CVE-2008-0104

2008-02-1223:00:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2008-0104

microsoft office

publisher

remote code execution

memory corruption

nvd

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.59 Medium

EPSS

Percentile

97.7%

JSON

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka “Publisher Memory Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2000
microsoft:officemicrosoft officeeq2003
microsoft:publishermicrosoft publishereq*
microsoft:officemicrosoft officeeqxp

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2000
microsoft:office	microsoft office	eq	2003
microsoft:publisher	microsoft publisher	eq	*
microsoft:office	microsoft office	eq	xp