Signature Detail

HTTP: Microsoft Publisher PUB File Processing Memory Corruption

This signature detects attempts to exploit a known vulnerability against Microsoft Publisher. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Publisher is prone to a code-execution vulnerability. This is due to a flaw when handling malformed PUB files. Successfully exploiting this issue allows attackers to corrupt process memory and to execute arbitrary code in the context of targeted users.

Affected Products

• HP Storage Management Appliance 2.1
• Microsoft Office 2000 SP1
• Microsoft Office 2000 SP2
• Microsoft Office 2000 SP3
• Microsoft Office 2000
• Microsoft Office 2003 SP1
• Microsoft Office 2003 SP2
• Microsoft Office 2003
• Microsoft Office XP SP1
• Microsoft Office XP SP2
• Microsoft Office XP SP3
• Microsoft Office XP
• Microsoft Publisher 2000
• Microsoft Publisher 2002
• Microsoft Publisher 2003

References

• BugTraq: 19951
• CVE: CVE-2006-0001