CVE-2004-0200

CVE-2004-0200 is a buffer-overflow vulnerability in the JPEG parsing engine of Microsoft GDI+ (GDIPlus.dll). The flaw allows remote code execution when a specially crafted JPEG image is processed, with the attack vector involving JPEG data that is mis-sized during a memory copy. The vulnerability...

CVE-2007-0671

CVE-2007-0671 is a remote-code-execution vulnerability in Microsoft Office Excel (affecting Excel 2000/XP/2003 and Mac equivalents) where a specially crafted Excel file can trigger arbitrary code execution. The vulnerability arises from improper handling/parsing of office records, enabling remote...

CVE-2006-3877

PowerPoint Malformed Record Memory Corruption Vulnerability (CVE-2006-3877) affects multiple Office suites. A remote code execution flaw exists when PowerPoint opens a specially crafted file with malformed records, allowing an attacker to gain full control of the affected system if the user runs ...

CVE-2010-2569

CVE-2010-2569 concerns a heap corruption flaw in pubconv.dll (Publisher Converter DLL) used by Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2. The vulnerability occurs when Publisher files with an unspecified or mis-sized value are parsed, potentially enabling remote code execution or a den...

CVE-2006-0001

CVE-2006-0001 is a stack-based buffer overflow in Microsoft Publisher 2000–2003 triggered by parsing a crafted .pub font string, allowing a user-assisted remote attacker to execute arbitrary code. The vulnerability arises from insufficient validation during Publisher’s processing of Publisher doc...

CVE-2010-2571

CVE-2010-2571 is a memory corruption vulnerability in Microsoft Publisher 2002 SP3 and Microsoft Publisher 2003 SP3 caused by an array indexing error in the pubconv.dll (Publisher Converter DLL) when processing malformed Publisher 97 files. It enables remote code execution if a user opens a craft...

CVE-2004-0573

CVE-2004-0573 describes a buffer overflow in the Microsoft WordPerfect 5.x Converter used by Office 2000, Office XP, Office 2003, and Works Suite 2001–2004. The overflow occurs when reading an overly long WordPerfect 5.x document, allowing a remote attacker to execute arbitrary code with the priv...

CVE-2010-3955

CVE-2010-3955 concerns a memory corruption in Microsoft Publisher 2002 SP3 caused by an array indexing error in pubconv.dll (Publisher Converter DLL). A crafted Publisher file can trigger this vulnerability, enabling remote code execution on the affected system. Microsoft addressed this with secu...

CVE-2008-0102

CVE-2008-0102 is a Microsoft Office Publisher vulnerability (MS08-012) involving remote code execution via crafted .pub files. Affected: Publisher 2000 SP3, Publisher 2002 SP3, Publisher 2003 SP2. The issue (Publisher Invalid Memory Reference) stems from improper validation/loading of memory valu...

CVE-2010-3954

CVE-2010-3954 corresponds to multiple memory corruption vulnerabilities in Microsoft Publisher (2002 SP3, 2003 SP3, and 2010). The issue is triggered when handling malformed Publisher files, allowing remote attackers to execute arbitrary code or cause a denial of service. The underlying root caus...

CVE-2007-6534

CVE-2007-6534 involves multiple unspecified vulnerabilities in Microsoft Office Publisher that allow a user‑assisted remote attacker to cause an application crash by processing a crafted PUB file, potentially involving WordArt. Affected product: Microsoft Office Publisher. Vulnerable functionalit...

CVE-2010-2570

CVE-2010-2570 : A heap-based buffer overflow in pubconv.dll (Publisher Converter DLL) of Microsoft Publisher affects 2002 SP3, 2003 SP3, 2007 SP2, and 2010. A crafted Publisher file using an old format can trigger arbitrary code execution remotely. The issue is documented under MS10-103, which pr...

CVE-2010-0479

CVE-2010-0479 is a remote-code-execution vulnerability in Microsoft Office Publisher (2002 SP3, 2003 SP3, 2007 SP1/SP2) caused by a buffer overflow in the Publisher file conversion TextBox processing. An attacker could trigger code execution by enticing a user to open a specially crafted Publishe...