CVE-2014-1759 pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a craf...
HighCVSS 9.3
EPSS 14.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft publisher | = 2003-sp3 | No fix listed |
| Microsoft publisher | = 2007-sp3 | No fix listed |
References
- MS14-020 vendor-advisory