PT-2008-1757 · Microsoft · Office Publisher

Published 2008-02-12 · Updated 2018-10-12 · CVE-2008-0102

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Publisher versions 2000 through 2003 SP2

Description The issue allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid memory values. A remote code execution vulnerability exists in the way Microsoft Office Publisher validates application data when loading Publisher files to memory. An attacker could exploit the vulnerability by constructing a specially crafted Publisher (.pub) file. When a user views the .pub file, the vulnerability could allow remote code execution, potentially giving the attacker complete control of an affected system, including the ability to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Office Publisher versions 2000 through 2003 SP2, consider avoiding the use of .pub files from untrusted sources until a patch is available. As a temporary workaround, restrict access to the memory values validation component to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-0102

Affected Products

Office Publisher

References · 12

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-012 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=120361015026386&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0102 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-0102 · Security Note
• http://securityfocus.com/bid/27739 · Note
• http://secunia.com/advisories/28906 · Note
• http://us-cert.gov/cas/techalerts/TA08-043C.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5305 · Note
• http://securitytracker.com/id?1019376 · Note
• http://vupen.com/english/advisories/2008/0514/references · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0102 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-012 · Note