Microsoft Publisher memory corruption
Published:		16.10.2011
Source:		BUGTRAQ
SecurityVulns ID:		11980
Type:		local
Level:		5/10
Description:		Memory corruption on .pub files parsing.

Affected:		MICROSOFT : Publisher 2007
CVE:		CVE-2011-1508 (Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Function Pointer Overwrite Vulnerability.")

Original document

CORE SECURITY TECHNOLOGIES ADVISORIES, CORE-2011-0106: Microsoft Publisher 2007 Pubconv.dll Memory Corruption (16.10.2011)

Discuss:

Read or add your comments to this news (0 comments)