Description
Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.
References
- oval:org.mitre.oval:def:590 vdb-entry signature
- VU#406236 third-party-advisory
- 1548 third-party-advisory
- 1016825 vdb-entry
- 19951 vdb-entry
- MS06-054 vendor-advisory
- TA06-255A third-party-advisory
- 21863 third-party-advisory
- publisher-pub-code-execution(28648) vdb-entry
- SSRT061187 vendor-advisory
- ADV-2006-3565 vdb-entry
- 20060912 Computer Terrorism (UK) :: Incident Response Centre - Microsoft Publisher Font Parsing Vulnerability mailing-list
- http://www.computerterrorism.com/research/ct12-09-2006-2.htm