CVE-2007-1754

PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".
Configurations

Configuration 1

cpe:2.3:a:microsoft:publisher:2007:*:*:*:*:*:*:*

Information

Published : 2007-07-10 10:30

Updated : 2018-10-16 04:40


NVD link : CVE-2007-1754

Mitre link : CVE-2007-1754

Products Affected
No products.
CWE