3640 matches found
Microsoft Publisher文件解析多个内存破坏漏洞（MS08-012）
BUGTRAQ ID: 27740,27739 CVECAN ID: CVE-2007-0104,CVE-2007-0102 Publisher是微软Office办公软件套件中用于创建、个性化和共享各种出版物和营销材料的工具。 Publisher在将Publisher文件加载到内存时没有正确地验证应用程序数据，在打开特制的Publisher文件时没有验证内存索引值。如果用户受骗打开了恶意.pub文件的话，就可能触发内存破坏，导致执行任意指令。 Microsoft Publisher 2003 SP2 Microsoft Publisher 2002 Microsoft Publisher...
Microsoft Publisher multiple security vulnerabilities
Uninitialized memory reference and DoS conditions on .pub files processing...
Microsoft Security Bulletin MS08-012 - Critical Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution (947085)
Microsoft Security Bulletin MS08-012 - Critical Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution 947085 Published: February 12, 2008 Version: 1.0 General Information Executive Summary This critical security update resolves two privately reported vulnerabilities in...
Memory corruption
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."...
CVE-2008-0102
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...
CVE-2008-0104
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."...
Memory corruption
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...
CVE-2008-0104
CVE-2008-0104 is the Publisher Memory Corruption vulnerability in Microsoft Office Publisher 2000 SP3, 2002 SP3, and 2003 SP2. A remote attacker can execute arbitrary code by convincing a user to open a specially crafted .pub file; the attacker could gain full control of the affected system. Micr...
CVE-2008-0102
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...
CVE-2008-0102
CVE-2008-0102 is a Microsoft Office Publisher vulnerability (MS08-012) involving remote code execution via crafted .pub files. Affected: Publisher 2000 SP3, Publisher 2002 SP3, Publisher 2003 SP2. The issue (Publisher Invalid Memory Reference) stems from improper validation/loading of memory valu...
CVE-2008-0104
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."...
Security Update for Microsoft Office Publisher 2003 (KB946254)
A security vulnerability exists in Publisher 2003 that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...
Security Update for Microsoft Office Publisher 2002 (KB946216)
A security vulnerability exists in Publisher 2002 that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...
Microsoft Publisher Invalid Memory Reference Remote Code Execution Vulnerability
Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Publisher file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...
Microsoft Publisher Memory Index Code Execution Vulnerability
Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Publisher file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...
Workaround for Multiple Microsoft Publisher Vulnerabilities (MS08-012)
Multiple vulnerabilities have been reported in Microsoft Publisher. Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. A remote attacker can exploit these vulnerabilities via a specially crafted .pub file. Successful...
CVE-2008-0102: Undefined Security Weakness
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."...
CVE-2008-0104: Improper Control of Generation of Code
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption Vulnerability."...
MS08-012: Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (947085)
The remote host is running a version of Microsoft Publisher that may allow arbitrary code to be run on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the font parsing handler would result in code execution. ...