Vulnerabilities > Microsoft > Publisher > 2003

DATE CVE VULNERABILITY TITLE RISK
2014-04-08 CVE-2014-1759 Remote Code Execution vulnerability in Microsoft Publisher 2003/2007
pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability."
network
microsoft
critical
9.3
2013-05-15 CVE-2013-1329 Numeric Errors vulnerability in Microsoft Publisher 2003
Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Underflow Vulnerability."
network
microsoft CWE-189
critical
9.3
2013-05-15 CVE-2013-1328 Remote Code Execution vulnerability in Microsoft Publisher 2003/2007/2010
Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability."
network
microsoft
critical
9.3
2013-05-15 CVE-2013-1327 Numeric Errors vulnerability in Microsoft Publisher 2003
Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."
network
microsoft CWE-189
critical
9.3
2013-05-15 CVE-2013-1323 Code Injection vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Incorrect NULL Value Handling Vulnerability."
network
microsoft CWE-94
critical
9.3
2013-05-15 CVE-2013-1322 Remote Code Execution vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."
network
low complexity
microsoft
critical
10.0
2013-05-15 CVE-2013-1321 Improper Input Validation vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."
network
microsoft CWE-20
critical
9.3
2013-05-15 CVE-2013-1320 Buffer Errors vulnerability in Microsoft Publisher 2003
Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."
network
low complexity
microsoft CWE-119
critical
10.0
2013-05-15 CVE-2013-1319 Remote Code Execution vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Handling Vulnerability."
network
low complexity
microsoft
critical
10.0
2013-05-15 CVE-2013-1318 Improper Input Validation vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt Interface Pointer Vulnerability."
network
low complexity
microsoft CWE-20
critical
10.0