CyberSec.Space Logo
Back to CVE Browser

CVE-2008-0102

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0190%
EPSS Percentile26.00th
PublishedFeb 12, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."

Affected Platforms (CPE)

📦
Microsoft

Publisher

= 2000
📦
Microsoft

Publisher

= 2002
📦
Microsoft

Publisher

= 2003

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=120361015026386&w=2
🔗 http://secunia.com/advisories/28906
🔗 http://www.securityfocus.com/bid/27739
🔗 http://www.securitytracker.com/id?1019376
🔗 http://www.us-cert.gov/cas/techalerts/TA08-043C.html
🔗 http://www.vupen.com/english/advisories/2008/0514/references
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-012
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5305

Related Vulnerabilities

CVE-2018-1941710.0

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parse_publish_vhdr() that parses MQTT PUBLISH me...

CVE-2021-3267110.0

Flarum is a forum software for building communities. Flarum's translation system allowed for string inputs to be converted into HT...

CVE-2018-1646210.0

A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shell command ...

CVE-2000-006210.0

The DTML implementation in the Z Object Publishing Environment (Zope) allows remote attackers to conduct unauthorized activities.