QwikSec

Security Database

CVE

CWE

Training

CVE-2007-1754

Published: Jul 10, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_HP

vendor-advisory

x_refsource_MS

vdb-entry

x_refsource_SECTRACK

http://research.eeye.com/html/advisories/published/AD20070710.html

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

oval:org.mitre.oval:def:1871

vdb-entry

signature

x_refsource_OVAL

third-party-advisory

x_refsource_CERT

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_OSVDB

20070710 EEYE: Microsoft Publisher 2007 Arbitrary Pointer Dereference

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.