PT-2008-1759 · Microsoft · Office Publisher

Published 2008-02-12 · Updated 2018-10-30 · CVE-2008-0104

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Publisher versions 2000 through 2003 SP2

Description The issue allows remote attackers to execute arbitrary code via a crafted .pub file. A remote code execution vulnerability exists in the way Microsoft Office Publisher validates memory index values. An attacker could exploit the vulnerability by constructing a specially crafted Publisher (.pub) file. When a user views the .pub file, the vulnerability could allow remote code execution, potentially giving the attacker complete control of an affected system, including the ability to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Office Publisher versions 2000 through 2003 SP2, consider avoiding the use of .pub files from untrusted sources until a patch is available. As a temporary workaround, restrict access to the vulnerable component that handles .pub files to minimize the risk of exploitation.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-0104

Affected Products

Office Publisher

References · 11

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0104 · Security Note
• http://marc.info/?l=bugtraq&m=120361015026386&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0104 · Security Note
• http://securityfocus.com/bid/27740 · Note
• http://secunia.com/advisories/28906 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4547 · Note
• http://us-cert.gov/cas/techalerts/TA08-043C.html · Note
• http://vupen.com/english/advisories/2008/0514/references · Note
• http://securitytracker.com/id?1019377 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2008/MS08-012 · Note