CVE-2007-1754 PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a ma...
HighCVSS 9.3
EPSS 32.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft publisher | = 2007 | No fix listed |
References
- SSRT071446 vendor-advisory
- 35953 vdb-entry
- research.eeye.com
- 25988 third-party-advisory vendor-advisory
- 20070710 EEYE: Microsoft Publisher 2007 Arbitrary Pointer Dereference mailing-list
- 1018353 vdb-entry
- TA07-191A third-party-advisory us-government-resource
- ADV-2007-2479 vdb-entry vendor-advisory
- MS07-037 vendor-advisory
- oval:org.mitre.oval:def:1871 signature vdb-entry