PT-2010-4116

Name of the Vulnerable Software and Affected Versions Microsoft Publisher versions 2002 SP3 through 2010 Description A remote code execution issue exists in the way Microsoft Publisher parses Publisher files, allowing attackers to execute arbitrary code via a crafted Publisher file that uses an o...

CVE-2010-3955: Improper Control of Generation of Code

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Array Indexing Memory Corruption Vulnerability."...

VUPEN Security Research - Microsoft Office Publisher Size Value Heap Corruption Vulnerability (VUPEN-SR-2010-200)

VUPEN Security Research - Microsoft Office Publisher Size Value Heap Corruption Vulnerability VUPEN-SR-2010-200 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Publisher, is a desktop publishing application from Microsoft. It is an entry-level application,...

CVE-2010-3954: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."...

PT-2010-5191

Name of the Vulnerable Software and Affected Versions Microsoft Publisher 2002 SP3 Description The issue allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format. A remote code execution vulnerability exists in the way that Microsoft Publisher...

VUPEN Security Research - Microsoft Office Publisher Record Array Indexing Vulnerability (VUPEN-SR-2010-201)

VUPEN Security Research - Microsoft Office Publisher Record Array Indexing Vulnerability VUPEN-SR-2010-201 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Publisher, is a desktop publishing application from Microsoft. It is an entry-level application,...

PT-2010-4115

Name of the Vulnerable Software and Affected Versions Microsoft Publisher versions 2002 SP3 through 2007 SP2 Description The issue arises from the improper handling of an unspecified size field in certain older file formats by the pubconv.dll in Microsoft Publisher. This can lead to heap memory...

PT-2010-5190

Name of the Vulnerable Software and Affected Versions Microsoft Publisher versions 2002 SP3, 2003 SP3, and 2010 Description A remote code execution issue exists in the way Microsoft Publisher opens Publisher files. An attacker could exploit this by creating a specially crafted Publisher file, whi...

CVE-2010-2571: Improper Input Validation

Array index error in pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka "Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability."...

CVE-2010-2569: Improper Control of Generation of Code

pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a...

VUPEN Security Research - Microsoft Office Publisher Memory Corruption Vulnerability (VUPEN-SR-2010-041)

VUPEN Security Research - Microsoft Office Publisher Memory Corruption Vulnerability VUPEN-SR-2010-041 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Publisher, is a desktop publishing application from Microsoft. It is an entry-level application, differin...

PT-2010-4117

Name of the Vulnerable Software and Affected Versions Microsoft Publisher versions 2002 SP3 through 2003 SP3 Description A remote code execution issue exists in the way Microsoft Publisher opens Publisher files. This could be exploited by an attacker creating a specially crafted Publisher file,...

VUPEN Security Research - Microsoft Office Publisher "pubconv.dll" Array Indexing Vulnerability (VUPEN-SR-2010-206)

VUPEN Security Research - Microsoft Office Publisher "pubconv.dll" Array Indexing Vulnerability VUPEN-SR-2010-206 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Publisher, is a desktop publishing application from Microsoft. It is an entry-level applicatio...

CVE-2010-2570: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in pubconv.dll aka the Publisher Converter DLL in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability."...

Microsoft Publisher Remote Code Execution Vulnerability (2292970)

This host is missing a critical security update according to Microsoft Bulletin MS10-103. OpenVAS Vulnerability Test $Id: secpodms10-103.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Publisher Remote Code Execution Vulnerability 2292970 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

Microsoft Publisher Remote Code Execution Vulnerability (2292970)

This host is missing a critical security update according to Microsoft Bulletin MS10-103. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS10-103: Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2292970)

The Publisher component of Microsoft Office installed on the remote host has multiple memory corruption vulnerabilities. A remote attacker could exploit these by tricking a user into opening a specially crafted Publisher file, resulting in remote code execution. C Tenable Network Security, Inc...

Security Update for Microsoft Office Publisher 2003 (KB2284695)

A security vulnerability exists in Microsoft Office Publisher 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Publisher Size Value Heap Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Microsoft Publisher (CVE-2010-3954) Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...