CVE-2008-0119 Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with craft...
HighCVSS 9.3
EPSS 30.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2000-sp3 | No fix listed |
| Microsoft office | = 2003-sp2 | No fix listed |
| Microsoft office | = 2003-sp3 | No fix listed |
| Microsoft office | = 2007 | No fix listed |
| Microsoft office | = 2007_sp1 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
References
- SSRT080071 vendor-advisory
- 30150 third-party-advisory vendor-advisory
- 20080514 Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability mailing-list
- 29158 vdb-entry
- 1020015 vdb-entry
- TA08-134A third-party-advisory us-government-resource
- ADV-2008-1505 vdb-entry
- MS08-027 vendor-advisory
- oval:org.mitre.oval:def:5303 signature vdb-entry