CVE-2010-0479 - Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."

Back Back to CVE browser

HIGH

Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."

Published Apr 14, 2010

9.3

HIGH

CVSS 2.0

EPSS 23.41%

Description

Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (4)

http://www.us-cert.gov/cas/techalerts/TA10-103A.html
third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-023
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0510
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7141
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://www.us-cert.gov/cas/techalerts/TA10-103A.html		third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-023		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0510		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7141		vdb-entrysignaturex_refsource_OVAL