CVE-2007-6534

CVE-2007-6534 involves multiple unspecified vulnerabilities in Microsoft Office Publisher that allow a user‑assisted remote attacker to cause an application crash by processing a crafted PUB file, potentially involving WordArt. Affected product: Microsoft Office Publisher. Vulnerable functionalit...

Microsoft Office Publisher多个拒绝服务漏洞

BUGTRAQ ID: 26982 CNCAN ID:CNCAN-2007122407 Microsoft Office Publisher是一款微软提供的桌面出版应用软件。 Microsoft Office Publisher处理特殊构建的程序存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 建立一个Publisher文件，并修改00006B90到00006D90为A，可导致应用程序崩溃。或者建立的新文件增加一个使用多个“A”的"wordart"选项，然后修改000077D0到000079B0为A。可导致应用程序崩溃。 Microsoft Publisher 2007 0...

Microsoft Office Publisher /Word DoS

Crash on malformed .pub file with WordArt object parsing...

Microsoft Office Publisher

I found two ways to cause a denial of service on the Microsoft Office Publisher, this is done by creating a malformed file with the following characteristics: The first is to create a new file and modifying hexadicimal with an editor from the direction 00006B90 to 00006D90 with the letter "A", th...

Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...

aleris-sql.txt

http://www.alerisdata.com/articles/home.asp There exists an SQL injection vulnerability within the calendar section of a Aleris Software Systems web publisher. It seems thats Aleris uses this same calendar with every site they make that utilizes the publisher...

Aleris Software Systems Web Publisher Calendar SQL injection

http://www.alerisdata.com/articles/home.asp There exists an SQL injection vulnerability within the calendar section of a Aleris Software Systems web publisher. It seems thats Aleris uses this same calendar with every site they make that utilizes the publisher...

Update Protection against Microsoft Office Publisher 2007 Remote Code Execution Vulnerability (MS07-037)

A remote code execution vulnerability has been reported in Microsoft Publisher. Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. A remote attacker can exploit this vulnerability via a specially crafted .pub file. Successfu...

Microsoft Office Publisher未明远程代码执行漏洞

BUGTRAQ ID: 22702 CVE ID:CVE-2007-1754 CNCVE ID:CNCVE-20071754 Microsoft Office是一款微软开发的流行的文字处理软件。 Microsoft Office包含的Publisher 2007存在一个未明缺陷，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 Publisher 2007在当应用程序从磁盘写数据到内存时，不充分清楚内存资源，可导致非法内存应用而造成拒绝服务，存在任意代码执行可能。 Microsoft Publisher 2007 0 Microsoft Office 2007 0 +...

Microsoft Publisher memory corruption

Memory corruption on .PUB files parsing...

EEYE: Microsoft Publisher 2007 Arbitrary Pointer Dereference

Microsoft Publisher 2007 Arbitrary Pointer Dereference Release Date: July 10, 2007 Date Reported: February 16, 2007 Severity: High Remote Code Execution Vendor: Microsoft Vendor Software Affected: Microsoft Office 2007 Small Business Microsoft Office 2007 Professional Microsoft Office 2007 Ultima...

Memory corruption

PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that...

CVE-2007-1754

PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that...

CVE-2007-1754

PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that...

CVE-2007-1754

CVE-2007-1754: Microsoft Office Publisher 2007 contains a memory handling flaw in pubconv.dll when transferring data from disk to memory, enabling remote code execution via a crafted .pub file. Connected advisories (MS07-037) confirm a remote code execution vulnerability and describe mitigations ...

Microsoft Security Bulletin MS07-037 - Important Vulnerability in Microsoft Office Publisher 2007 Could Allow Remote Code Execution (936548)

Microsoft Security Bulletin MS07-037 - Important Vulnerability in Microsoft Office Publisher 2007 Could Allow Remote Code Execution 936548 Published: July 10, 2007 Version: 1.0 General Information Executive Summary This important security update resolves one publicly disclosed vulnerability. This...

MS07-037: Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (936548)

The remote host is running a version of Microsoft Publisher that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25688;...

Sql injection

Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the 1 artid parameter to mod.php in a viewarticle action publisher mod and the 2 bid parameter to banners.php in a click action. NOTE: the mod.php viewdisk and viewlink vectors are...

Microsoft Security Bulletin MS07-025 Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873)

Microsoft Security Bulletin MS07-025 Vulnerability in Microsoft Office Could Allow Remote Code Execution 934873 Published: May 8, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Office Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

hcnews-blindsql.txt

HC NEWSSYSTEM 1.0-4 index.php "ID" Blind SQL Injection Type : SQL Injection Release Date : 2007-03-08 Product / Vendor : HC Design News Publisher. http://www.hcdesign.at/demo Bug : http://localhost/script/index.php?option=news&aktion=komm&ID=-SQL Inj.- SQL Inj Code : Admin Username/Password Query...