Security Update for Microsoft Office Publisher 2003 (KB950213)

A security vulnerability exists in Microsoft Publisher 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Publisher Memory Object Handler Data Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Publisher file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

MS08-027: Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208)

The remote host is running a version of Microsoft Publisher that is subject to a flaw that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it...

CVE-2008-1872

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1872

The CVE covers a SQL injection vulnerability in Comdev News Publisher 4.1.2, specifically in the home.news.php script where the arcmonth parameter can be exploited to execute arbitrary SQL commands remotely. This is documented with a CVSS v2 base score of 7.5 (HIGH) and a network attack vector wi...

CVE-2008-1872

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information...

Comdev News Publisher Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Comdev News Publisher Remote SQL Injection Vulnerability ========================================================...

comdev-sql.txt

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

Comdev News Publisher 4.1.2 - SQL Injection

Comdev News Publisher 4.1.2 - SQL Injection --==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovere...

Comdev News Publisher 4.1.2 - SQL Injection

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

Microsoft Publisher文件解析多个内存破坏漏洞（MS08-012）

BUGTRAQ ID: 27740,27739 CVECAN ID: CVE-2007-0104,CVE-2007-0102 Publisher是微软Office办公软件套件中用于创建、个性化和共享各种出版物和营销材料的工具。 Publisher在将Publisher文件加载到内存时没有正确地验证应用程序数据，在打开特制的Publisher文件时没有验证内存索引值。如果用户受骗打开了恶意.pub文件的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Publisher 2003 SP2 Microsoft Publisher 2002 Microsoft Publisher...

Microsoft Publisher multiple security vulnerabilities

Uninitialized memory reference and DoS conditions on .pub files processing...

Microsoft Security Bulletin MS08-012 - Critical Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution (947085)

Microsoft Security Bulletin MS08-012 - Critical Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution 947085 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This critical security update resolves two privately reported vulnerabilities in...

CVE-2008-0102

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...

CVE-2008-0104

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."...

Memory corruption

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...

Memory corruption

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."...

CVE-2008-0102

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...

CVE-2008-0104

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."...

CVE-2008-0102

CVE-2008-0102 is a Microsoft Office Publisher vulnerability (MS08-012) involving remote code execution via crafted .pub files. Affected: Publisher 2000 SP3, Publisher 2002 SP3, Publisher 2003 SP2. The issue (Publisher Invalid Memory Reference) stems from improper validation/loading of memory valu...