Vulnerabilities > Microsoft > Office Publisher > 2007

DATE CVE VULNERABILITY TITLE RISK
2009-07-15 CVE-2009-0566 Code Injection vulnerability in Microsoft Office Publisher 2007
Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
network
microsoft CWE-94
critical
9.3