RCE in Microsoft Publisher

CVE-2011-1508

Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Function Pointer Overwrite Vulnerability."

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.145 (96.3th percentile) — read the EPSS interpretation.

Affected products

Microsoft Publisher — versions 2003, 2007
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
cve@mitre.org (x_refsource_MS, vendor-advisory)