3028 matches found
Null pointer dereference
Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt Interface Pointer Vulnerability."...
Integer overflow
Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka "Publisher Integer Overflow Vulnerability."...
Spoofing
Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability."...
Design/Logic Flaw
Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Incorrect NULL Value Handling Vulnerability."...
Buffer overflow
Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."...
Integer overflow
Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Underflow Vulnerability."...
Design/Logic Flaw
Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."...
Input validation
Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."...
CVE-2013-1322
Microsoft Publisher 2003 SP3 is affected by CVE-2013-1322, a remote code execution vulnerability caused by improper validation of table range data in Publisher files. A crafted Publisher document can trigger arbitrary code execution in the context of the logged-in user. The issue is part of a bro...
CVE-2013-1320
CVE-2013-1320 (and related CVEs 2013-1316 to 2013-1329) describe multiple buffer/memory‑corruption vulnerabilities in Microsoft Office Publisher components. The published data indicate a remote code execution risk when a user opens a specially crafted Publisher file, affecting Publisher 2003 SP2/...
CVE-2013-1323
Microsoft Publisher (Office Publisher) Remote Code Execution vulnerability CVE-2013-1323 arises from incorrect NULL value handling when processing unspecified data items in Publisher files. Affected products, per sources, include Microsoft Publisher 2003 SP2/SP3, 2007 SP3, and 2010 SP1 (32/64‑bit...
CVE-2013-1317
CVE-2013-1317 describes an integer overflow in Microsoft Publisher 2003 SP3 that allows remote code execution when a user opens a specially crafted Publisher file, caused by an improper allocation-size calculation. Public references note multiple related Publisher vulnerabilities (2830397 family)...
CVE-2013-1321
Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."...
CVE-2013-1327
Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."...
CVE-2013-1319
CVE-2013-1319 concerns Microsoft Office Publisher, specifically Publisher 2003 SP3 (and related SPs/versions) where a return-value handling vulnerability in an unspecified method allows remote code execution when a user opens a crafted Publisher file. The vulnerability is part of a set of issues ...
CVE-2013-1328
Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability."...
CVE-2013-1318
CVE-2013-1318 affects Microsoft Publisher (e.g., Publisher 2003 SP3) and allows remote code execution when a user opens a specially crafted Publisher file that triggers an invalid pointer/corrupt interface pointer condition. Exploitation details are provided in related advisories; patches exist (...
CVE-2013-1316
CVE-2013-1316 corresponds to a Microsoft Publisher 2003 SP3 vulnerability where a crafted Publisher file triggers a negative value allocation due to improper validation of an array size, enabling remote code execution. The related entries describe multiple related weaknesses in Publisher (includi...
CVE-2013-1328
CVE-2013-1328 affects Microsoft Publisher components: Publisher 2003 SP3, 2007 SP3, and 2010 SP1. It enables remote code execution when a user opens a specially crafted Publisher file, due to an incorrect pointer handling vulnerability in Publisher. Exploitation could allow arbitrary code executi...