PT-2009-3214 · Microsoft · Office Publisher

Lionel Dhauenens · Published 2009-07-15 · Updated 2018-10-12 · CVE-2009-0566

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Publisher 2007 SP1

Description The issue arises from the improper calculation of object handler data for Publisher files, allowing remote attackers to execute arbitrary code via a crafted file in a legacy format, triggering memory corruption. A remote code execution vulnerability exists in the way that Microsoft Office Publisher opens, imports, and converts files created in versions older than Microsoft Office Publisher 2007. An attacker could exploit this by creating a specially crafted Publisher file that could be included as an e-mail attachment or hosted on a specially crafted or compromised Web site. If a user were logged on with administrative user rights, an attacker who successfully exploited this could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Office Publisher 2007 SP1, consider applying security updates or patches to resolve the issue. As a temporary workaround, avoid opening or importing files from untrusted sources, and restrict access to the Publisher application until a patch is available.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-0566

Affected Products

Office Publisher

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2009-0566 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-030 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0566 · Security Note
• http://vupen.com/english/advisories/2009/1888 · Note
• http://osvdb.org/55838 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6285 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-030 · Note
• http://securityfocus.com/bid/35599 · Note
• http://us-cert.gov/cas/techalerts/TA09-195A.html · Note
• http://securitytracker.com/id?1022546 · Note