OSVDB ID: 86767 Title: Microsoft Office Publisher Read Access Violation PUB File Handling Memory Corruption |
Info |
|
|
Dates |
||||
|
|
Description |
Microsoft Office Publisher has been reported to contain a flaw that results in memory corruption and may allow for remote code execution. Based on the provided crash details and third-party disputes, there is, however, no evidence to support the claims of memory corruption and the possibility of code execution. Instead, the flaw is triggering a NULL pointer dereference error when parsing unspecified data. With a specially crafted PUB file, a context-dependent attacker can cause a crash, but not immediately execute arbitrary code. |
Classification |
Location:
Context Dependent
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: None Required Exploit: Exploit Public Disclosure: Vendor Disputed, Uncoordinated Disclosure OSVDB: Myth / Fake |
Solution |
OSVDB is not aware of a solution for this vulnerability. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |