Microsoft Office Publisher CVE-2017-8725 Remote Code Execution Vulnerability

Bugtraq ID:	100758
Class:	Design Error
CVE:	CVE-2017-8725
Remote:	Yes
Local:	No
Published:	Sep 12 2017 12:00AM
Updated:	Sep 12 2017 12:00AM
Credit:	Phil Blankenship
Vulnerable:	Microsoft Publisher 2010 Service Pack 2 (64-bit editions) 0 Microsoft Publisher 2010 Service Pack 2 (32-bit editions) 0 Microsoft Publisher 2007 SP3
Not Vulnerable:

Microsoft Office Publisher CVE-2017-8725 Remote Code Execution Vulnerability

Microsoft Office Publisher is prone to a remote code-execution vulnerability.

An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions.

Microsoft Office Publisher CVE-2017-8725 Remote Code Execution Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2017-8725 | Microsoft Office Publisher Remote Code Execution (Microsoft)