Signature Detail

HTTP: Microsoft Publisher Object Handler Validation Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Publisher. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Publisher file. Successfully exploiting this issue would allow the attacker to execute arbitrary code in the context of the currently logged-in user.

Affected Products

• Microsoft Publisher 2000 SP3
• Microsoft Publisher 2002 SP3
• Microsoft Publisher 2003 SP2
• Microsoft Publisher 2003 SP3
• Microsoft Publisher 2007 SP1
• Microsoft Publisher 2007

References

• BugTraq: 29158
• CVE: CVE-2008-0119