CVE

Id
25111  
CVE No.
CVE-2007-1754  
Status
Candidate  
Description
PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".  
Phase
Assigned (20070329)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
249951 25111 CVE-2007-1754 BUGTRAQ:20070710 EEYE: Microsoft Publisher 2007 Arbitrary Pointer Dereference  View
249952 25111 CVE-2007-1754 URL:http://www.securityfocus.com/archive/1/archive/1/473309/100/0/threaded  View
249953 25111 CVE-2007-1754 MISC:http://research.eeye.com/html/advisories/published/AD20070710.html  View
249954 25111 CVE-2007-1754 HP:SSRT071446  View
249955 25111 CVE-2007-1754 URL:http://archive.cert.uni-stuttgart.de/bugtraq/2007/07/msg00254.html  View
249956 25111 CVE-2007-1754 MS:MS07-037  View
249957 25111 CVE-2007-1754 URL:http://www.microsoft.com/technet/security/Bulletin/ms07-037.mspx  View
249958 25111 CVE-2007-1754 CERT:TA07-191A  View
249959 25111 CVE-2007-1754 URL:http://www.us-cert.gov/cas/techalerts/TA07-191A.html  View
249960 25111 CVE-2007-1754 OSVDB:35953  View
249961 25111 CVE-2007-1754 URL:http://osvdb.org/35953  View
249962 25111 CVE-2007-1754 VUPEN:ADV-2007-2479  View
249963 25111 CVE-2007-1754 URL:http://www.vupen.com/english/advisories/2007/2479  View
249964 25111 CVE-2007-1754 OVAL:oval:org.mitre.oval:def:1871  View
249965 25111 CVE-2007-1754 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1871  View
249966 25111 CVE-2007-1754 SECTRACK:1018353  View
249967 25111 CVE-2007-1754 URL:http://www.securitytracker.com/id?1018353  View
249968 25111 CVE-2007-1754 SECUNIA:25988  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51832 JVNDB-2007-000495 Microsoft Excel のバージョンの処理における演算エラーで任意のコードを実行される脆弱性 Microsoft Excel にはバージョン情報の検証に不備が存在するために、不正な Excel ファイルを処理した際に演算処理においてエラーが発生し、任意のコードを実行される脆弱性が存在します。 CVE-2007-1756 25111 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000495.html  View