Lucene search

K
cve[email protected]CVE-2014-1759
HistoryApr 08, 2014 - 11:55 p.m.

CVE-2014-1759

2014-04-0823:55:00
NVD-CWE-Other
web.nvd.nist.gov
20
microsoft publisher
pubconv.dll
remote code execution
arbitrary pointer dereference
vulnerability
nvd
cve-2014-1759

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.635 Medium

EPSS

Percentile

97.8%

pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted .pub file, aka “Arbitrary Pointer Dereference Vulnerability.”

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.635 Medium

EPSS

Percentile

97.8%