Microsoft Publisher Remote Code Execution Vulnerability (2292970)

This host is missing a critical security update according to Microsoft Bulletin MS10-103. OpenVAS Vulnerability Test $Id: secpodms10-103.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Publisher Remote Code Execution Vulnerability 2292970 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

MS10-103: Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2292970)

The Publisher component of Microsoft Office installed on the remote host has multiple memory corruption vulnerabilities. A remote attacker could exploit these by tricking a user into opening a specially crafted Publisher file, resulting in remote code execution. C Tenable Network Security, Inc...

Microsoft Publisher Remote Code Execution Vulnerability (2292970)

This host is missing a critical security update according to Microsoft Bulletin MS10-103. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Office Publisher 2003 (KB2284695)

A security vulnerability exists in Microsoft Office Publisher 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Office Publisher pubconv.dll Size Value Heap Corruption (MS10-103; CVE-2010-2569)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. The vulnerability is due to an error in pubconv.dll, Publisher Converter DLL that is used to open Publisher files created in versions earlier than Microsoft Publisher 2007. ...

Microsoft Publisher 'pubconv.dll' Array Index Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher 97 format file. Successfully exploiting this issue allows attackers to execute arbitrary code in the...

Microsoft Office Publisher Array Indexing Memory Corruption (MS10-103; CVE-2010-3955)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more A remote attacker can exploit this issue via a specially crafted Publisher file. Successful exploitation may allow execution of arbitrary code on the vulnerable system. The...

Microsoft Office Publisher pubconv.dll Heap Overrun (MS10-103; CVE-2010-2570)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. The vulnerability is due to an error in pubconv.dll, Publisher Converter DLL that is used to open Publisher files created in versions earlier than Microsoft Publisher 2007. ...

Microsoft Publisher Size Value Heap Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Microsoft Publisher Array Index Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Microsoft Office Publisher Pointer Reference Memory Corruption (MS10-103; CVE-2010-3954)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more The vulnerability is due to an error Microsoft Publisher that fails to properly clear a pointer when certain objects are deleted. A remote attacker could trigger this flaw by...

Microsoft Publisher (CVE-2010-3954) Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Microsoft Publisher 'pubconv.dll' Heap Based Buffer Overflow Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Julian Assange: The Man Behind WikiLeaks

Who is Julian Paul Assange? Julian Paul Assange is the lean, tall, and pale 39-year-old Australian hacker at the heart of WikiLeaks. This whistle-blowing website gained attention after revealing thousands of secret Afghan battlefield reports, making Assange a target for U.S. authorities. The Enig...

[DSECRG-09-029] Oracle BI Publisher Enterprise 10 - Response Splitting

Digital Security Research Group DSecRG Advisory DSECRG-09-029 Application: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: http://oracle.com Bugs: Response Splitting/XSS/phishing credentials...

Design/Logic Flaw

Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2 and 10.1.3.4.1 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-2413

CVE-2010-2413 affects Oracle BI Publisher (Oracle Fusion Middleware) versions 10.1.3.3.2 and 10.1.3.4.1. The vulnerability is described as an unspecified issue in BI Publisher that could allow remote attackers to affect integrity via unknown vectors. Oracle’s October 2010 Critical Patch Update li...

CVE-2010-2413: Undefined Security Weakness

Unspecified vulnerability in the BI Publisher component in Oracle Fusion Middleware 10.1.3.3.2 and 10.1.3.4.1 allows remote attackers to affect integrity via unknown vectors...

Sql injection

SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printarticle action to mod.php, a different vector than CVE-2007-3394...

CVE-2010-3461

CVE-2010-3461 (and related CVE-2007-3394) are concrete SQL injection vulnerabilities in eNdonesia 8.4. The issue affects the Publisher module and allows remote attackers to execute arbitrary SQL via the artid parameter (to mod.php) and, for CVE-2007-3394, via the bid parameter to banners.php (in ...