Microsoft Publisher对象处理器验证漏洞(MS08-027)

BUGTRAQ ID: 29158 CVECAN ID: CVE-2008-0119 Publisher是微软Office办公软件套件中用于创建、个性化和共享各种出版物和营销材料的工具。 Publisher验证对象头数据的方式中存在一个远程执行代码漏洞，攻击者可能通过发送特制的Publisher文件来利用该漏洞，该文件可能作为电子邮件附件提供或者宿主在特制的或被入侵的网站上。...

Microsoft Security Bulletin MS08-027 – Critical Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208)

Microsoft Security Bulletin MS08-027 – Critical Vulnerability in Microsoft Publisher Could Allow Remote Code Execution 951208 Published: May 13, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Publisher that cou...

Microsoft Publisher memory corruption

.PUB files memory corruption on embedded objects parsing...

Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability

/ Please join us to pray for the people still in the huge earthquake in eastern Sichuan, China. / Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: A memory corruption vulnerability exists in...

Input validation

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation...

CVE-2008-0119

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation...

CVE-2008-0119

CVE-2008-0119 affects Microsoft Publisher across multiple Office versions (2000 SP3, XP SP3, 2003 SP2/3, 2007 SP1) due to a memory corruption flaw in how Publisher validates object header data. An attacker could craft a Publisher file and lure a user into opening it (via email attachment or malic...

CVE-2008-0119

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation...

Security Update for Microsoft Publisher 2002 (KB950129)

A security vulnerability exists in Microsoft Publisher 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office Publisher 2003 (KB950213)

A security vulnerability exists in Microsoft Publisher 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

CVE-2008-0119: Improper Control of Generation of Code

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation...

Microsoft Publisher Memory Object Handler Data Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Publisher file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently...

MS08-027: Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208)

The remote host is running a version of Microsoft Publisher that is subject to a flaw that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it...

CVE-2008-1872

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1872

The CVE covers a SQL injection vulnerability in Comdev News Publisher 4.1.2, specifically in the home.news.php script where the arcmonth parameter can be exploited to execute arbitrary SQL commands remotely. This is documented with a CVSS v2 base score of 7.5 (HIGH) and a network attack vector wi...

CVE-2008-1872

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1872: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information...

Comdev News Publisher 4.1.2 - SQL Injection

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

Comdev News Publisher 4.1.2 - SQL Injection

Comdev News Publisher 4.1.2 - SQL Injection --==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovere...

comdev-sql.txt

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...