Unscored CVE-2009-0566 EUVD-2009-0570GHSA-4564-2f76-rv6p

Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to e…

Published Jul 15, 2009 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."

References

oval:org.mitre.oval:def:6285 vdb-entry signature
1022546 vdb-entry
55838 vdb-entry
MS09-030 vendor-advisory
35599 vdb-entry
ADV-2009-1888 vdb-entry
TA09-195A third-party-advisory