CVSS: 9.3EPSS: 32%CPEs: 2EXPL: 0CVE-2017-8725
https://notcve.org/view.php?id=CVE-2017-8725
13 Sep 2017 — A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microsoft Office Publisher Remote Code Execution". Existe una vulnerabilidad de ejecución remota de código en Microsoft Publisher 2007 Service Pack 3 y Microsoft Publisher 2010 Service Pack 2 cuando no manejan correctamente los objetos en la memoria. Esto también se conoce como "Microsoft Office Publisher Remote Code Exe... • http://www.securityfocus.com/bid/100758 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 31%CPEs: 44EXPL: 0CVE-2015-2503
https://notcve.org/view.php?id=CVE-2015-2503
11 Nov 2015 — Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, Excel 2010 SP2, InfoPath 2010 SP2, OneNote 2010 SP2, PowerPoint 2010 SP2, Project 2010 SP2, Publisher 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Pinyin IME 2010, Access 2013 SP1, Excel 2013 SP1, InfoPath 2013 SP1, OneNote 2013 SP1, PowerPoint 2013 SP1, Project 2013 SP1, Publisher 2013 SP1, Visi... • http://www.securitytracker.com/id/1034117 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 21%CPEs: 2EXPL: 0CVE-2014-1759
https://notcve.org/view.php?id=CVE-2014-1759
08 Apr 2014 — pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability." pubconv.dll en Microsoft Publisher 2003 SP3 y 2007 SP3 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (referencia a puntero incorrecta y caída de aplicación) a través de un archivo .pub manipulado, tamb... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-020 •
CVSS: 9.3EPSS: 59%CPEs: 3EXPL: 0CVE-2013-1328
https://notcve.org/view.php?id=CVE-2013-1328
15 May 2013 — Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability." Microsoft Publisher 2003 SP3, 2007 SP3, y 2010 SP1 permite a atacantes remotos ejecutar código arbitrario a través de un fichero Publisher manipulador que dispara el manejador incorrecto de puntero, también conocido como "Publisher Pointer Handling Vulnerability" • http://www.us-cert.gov/ncas/alerts/TA13-134A •
CVSS: 9.3EPSS: 28%CPEs: 3EXPL: 0CVE-2011-1508
https://notcve.org/view.php?id=CVE-2011-1508
14 Dec 2011 — Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Function Pointer Overwrite Vulnerability." Microsoft Publisher 2003 SP3, y 2007 SP2 y SP3, no gestiona adecuadamente la reserva de memoria para punteros a funciones, lo que permite a atacantes remotos asistidos por el usuario ejecutar código arbitrario a través de un archivo Pu... • https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-091 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 63%CPEs: 3EXPL: 0CVE-2011-3410
https://notcve.org/view.php?id=CVE-2011-3410
14 Dec 2011 — Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Out-of-bounds Array Index Vulnerability." Error de índice de array en Microsoft Publisher 2003 SP3, 2007 SP2 y SP3, permite a atacantes remotos ejecutar código arbitrario a través de un archivo Publisher modificado que explota un manejo de incorrecto de valores en memoria. También conocido... • http://www.kb.cert.org/vuls/id/361441 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 53%CPEs: 3EXPL: 0CVE-2011-3412
https://notcve.org/view.php?id=CVE-2011-3412
14 Dec 2011 — Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability." Microsoft Publisher 2003 SP3, y 2007 SP2 y SP3, permite a atacantes remotos ejecutar código arbitrario a través de archivos Publisher modificados que provocan un manejo de memoria incorrecto. También conocida "Vulnerabilidad de corrupción de memoria Publisher". • http://www.kb.cert.org/vuls/id/361441 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 58%CPEs: 3EXPL: 0CVE-2010-3954
https://notcve.org/view.php?id=CVE-2010-3954
16 Dec 2010 — Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability." Microsoft Publisher 2002 SP3, 2003 SP3, y 2010 permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria) a través de un fichero Publisher manipulado. También se conoce como "Vulnerabilidad de Corrupción de Memori... • http://www.securitytracker.com/id?1024885 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 58%CPEs: 3EXPL: 0CVE-2010-2569
https://notcve.org/view.php?id=CVE-2010-2569
16 Dec 2010 — pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka "Size Value Heap Corruption in pubconv.dll Vulnerability." pubconv.dll (también conocido como el Publisher Converter DLL) en Microsoft Publisher 2002 SP3, 2003 SP3, y 2007 SP2, no mane... • http://www.securitytracker.com/id?1024885 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 59%CPEs: 4EXPL: 0CVE-2010-2570
https://notcve.org/view.php?id=CVE-2010-2570
16 Dec 2010 — Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka "Heap Overrun in pubconv.dll Vulnerability." Desbordamiento de búfer basado en memoria dinámica en pubconv.dll (también conocido como Publisher Converter DLL) en Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, y 2010, permite a atacantes remotos causar una de... • http://www.securitytracker.com/id?1024885 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •