NVD

Id
53932  
Name
CVE-2007-1754  
Description
PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-10  
Modified Date
2012-10-30  
Seq
2007-1754  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273485 53932 CVE-2007-1754 SSRT071446  View
273486 53932 CVE-2007-1754 oval:org.mitre.oval:def:1871  View
273487 53932 CVE-2007-1754 http://research.eeye.com/html/advisories/published/AD20070710.html  View
273488 53932 CVE-2007-1754 MS07-037  View
273489 53932 CVE-2007-1754 20070710 EEYE: Microsoft Publisher 2007 Arbitrary Pointer Dereference  View
273490 53932 CVE-2007-1754 1018353  View
273491 53932 CVE-2007-1754 TA07-191A  View
273492 53932 CVE-2007-1754 ADV-2007-2479  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51835 JVNDB-2007-000498 Microsoft Office Publisher における任意のコードを実行される脆弱性 Microsoft Office Publisher には、不正な形式のファイルから読み取られた無効なメモリの値を正しく検証しないために任意のコードを実行される脆弱性が存在します。 CVE-2007-1754 25109 CVE-2007-1754 53932 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000498.html 2007-07-10 2007-07-18 View