CVE-2011-3410

Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Out-of-bounds Array Index Vulnerability."...

PT-2011-4437

Name of the Vulnerable Software and Affected Versions Microsoft Publisher versions 2003 SP3, 2007 SP2, 2007 SP3 Description A remote code execution issue exists in the way Microsoft Publisher parses Publisher files, allowing attackers to execute arbitrary code via a crafted file. This is due to...

Microsoft Publisher Invalid Pointer Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Microsoft Publisher Out of Bound Array Index Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Microsoft Publisher (CVE-2011-3412) Remote Memory Corruption Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

PT-2011-3175

Name of the Vulnerable Software and Affected Versions Microsoft Publisher versions 2003 SP3, 2007 SP2, 2007 SP3 Description A remote code execution issue exists in the way Microsoft Publisher parses Publisher files. This could be exploited by an attacker creating a specially crafted Publisher fil...

Microsoft Publisher Malformed File Parsing Memory Corruption (MS11-091; CVE-2011-3412)

A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is due to an error in the way Microsoft Publisher handles memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to open a...

Microsoft Publisher Out-of-bounds Array Index Code Execution (MS11-091; CVE-2011-3410)

A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is caused when Microsoft Publisher does not properly handle values in memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to...

Microsoft Publisher Invalid Pointer Code Execution (MS11-091; CVE-2011-3411)

A remote code execution vulnerability has been reported in Microsoft Publisher. The vulnerability is caused when Microsoft Publisher does not properly handle values in memory while parsing specially crafted Publisher files. A remote attacker may exploit this vulnerability by convincing a user to...

PT-2011-4439

Name of the Vulnerable Software and Affected Versions Microsoft Publisher versions 2003 SP3, 2007 SP2, 2007 SP3 Description A remote code execution issue exists due to incorrect memory handling when parsing Publisher files. An attacker can exploit this by creating a specially crafted Publisher...

MS11-091: Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2607702)

The Publisher component of Microsoft Office installed on the remote host is affected by multiple vulnerabilities : - The application could allow overwriting function pointers in memory. CVE-2011-1508 - The application could allow indexing an out-of-bounds array in memory. CVE-2011-3410 - The...

PT-2011-4438

Name of the Vulnerable Software and Affected Versions Microsoft Publisher version 2003 SP3 Description A remote code execution issue exists due to the incorrect handling of values in memory when parsing Publisher files. This could allow an attacker to execute arbitrary code by creating a speciall...

Microsoft Office Publisher contains multiple exploitable vulnerabilities

Overview Microsoft Office Publisher fails to properly validate Publisher documents, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Publisher is a desktop publishing application that is provided with some versions of...

Viscom Image Viewer CP Pro 8.0/Gold 6.0 ActiveX Control

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Microsoft Publisher memory corruption

Memory corruption on .pub files parsing...

CORE-2011-0106: Microsoft Publisher 2007 Pubconv.dll Memory Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ Microsoft Publisher 2007 Pubconv.dll Memory Corruption 1. Advisory Information Title: Microsoft Publisher 2007 Pubconv.dll Memory Corruption Advisory ID: CORE-2011-0106...

Microsoft Publisher 2007 Pubconv.dll内存破坏漏洞

CVE ID: CVE-2011-1508 Microsoft Publisher是微软公司发行的桌面出版应用软件。 Publisher 2007中存在输入验证错误，可被远程攻击者利用通过诱使用户在文档中插入特制的.pub文件执行任意代码。 通过修改.pub文件，可使pubconv.dll库复制很多文件内容到栈中，从而覆盖稍后执行的函数指针。 Microsoft Publisher 2007 12.0.6546.5000 厂商补丁： Microsoft --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Microsoft Publisher 2007 Pubconv.dll Memory Corruption

Core Security Technologies - Corelabs Advisory Microsoft Publisher 2007 Pubconv.dll Memory Corruption 1. Advisory Information Title: Microsoft Publisher 2007 Pubconv.dll Memory Corruption Advisory ID: CORE-2011-0106 Advisory URL:...

Logical Web Publisher SQL Injection

+------------------------------------------------------------------------------------------+ |------------------- Logical Web Publisher SQL Injection Vulnerability ------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...

Oracle BI Publisher Enterprise Detection

The remote web server hosts Oracle BI Publisher Enterprise, a report publishing system written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53258; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...