Description
Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Underflow Vulnerability."
References
- TA13-134A third-party-advisory
- oval:org.mitre.oval:def:16554 vdb-entry signature
- MS13-042 vendor-advisory