Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability

/ Please join us to pray for the people still in the huge earthquake in eastern Sichuan, China. / Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: A memory corruption vulnerability exists in...

Microsoft Security Bulletin MS08-027 – Critical Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208)

Microsoft Security Bulletin MS08-027 – Critical Vulnerability in Microsoft Publisher Could Allow Remote Code Execution 951208 Published: May 13, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Publisher that cou...

CVE-2008-0119

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation...

Input validation

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation...

CVE-2008-0119

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation...

CVE-2008-0119

CVE-2008-0119 affects Microsoft Publisher across multiple Office versions (2000 SP3, XP SP3, 2003 SP2/3, 2007 SP1) due to a memory corruption flaw in how Publisher validates object header data. An attacker could craft a Publisher file and lure a user into opening it (via email attachment or malic...

Security Update for Microsoft Office Publisher 2003 (KB950213)

A security vulnerability exists in Microsoft Publisher 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Publisher 2002 (KB950129)

A security vulnerability exists in Microsoft Publisher 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2008-0119: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation...

Microsoft Publisher Memory Object Handler Data Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Publisher file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

MS08-027: Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208)

The remote host is running a version of Microsoft Publisher that is subject to a flaw that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it...

CVE-2008-1872

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1872

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1872

The CVE covers a SQL injection vulnerability in Comdev News Publisher 4.1.2, specifically in the home.news.php script where the arcmonth parameter can be exploited to execute arbitrary SQL commands remotely. This is documented with a CVSS v2 base score of 7.5 (HIGH) and a network attack vector wi...

CVE-2008-1872: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information...

Comdev News Publisher 4.1.2 - SQL Injection

Comdev News Publisher 4.1.2 - SQL Injection --==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovere...

Comdev News Publisher Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Comdev News Publisher Remote SQL Injection Vulnerability ========================================================...

Comdev News Publisher 4.1.2 - SQL Injection

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

comdev-sql.txt

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

Microsoft Publisher文件解析多个内存破坏漏洞（MS08-012）

BUGTRAQ ID: 27740,27739 CVECAN ID: CVE-2007-0104,CVE-2007-0102 Publisher是微软Office办公软件套件中用于创建、个性化和共享各种出版物和营销材料的工具。 Publisher在将Publisher文件加载到内存时没有正确地验证应用程序数据，在打开特制的Publisher文件时没有验证内存索引值。如果用户受骗打开了恶意.pub文件的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Publisher 2003 SP2 Microsoft Publisher 2002 Microsoft Publisher...