Microsoft Publisher Size Value Heap Memory Corruption Remote Code Execution Vulnerability
BID:45277
Info
Microsoft Publisher Size Value Heap Memory Corruption Remote Code Execution Vulnerability
| Bugtraq ID: | 45277 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-2569 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 14 2010 12:00AM |
| Updated: | Dec 16 2010 02:44PM |
| Credit: | Chaouki Bekrar of VUPEN Vulnerability Research Team |
| Vulnerable: |
Microsoft Publisher 2007 SP2 Microsoft Publisher 2007 SP1 Microsoft Publisher 2007 0 Microsoft Publisher 2003 SP3 Microsoft Publisher 2003 SP2 Microsoft Publisher 2003 Microsoft Publisher 2002 SP3 Microsoft Publisher 2002 |
| Not Vulnerable: | |
Discussion
Microsoft Publisher Size Value Heap Memory Corruption Remote Code Execution Vulnerability
Microsoft Publisher is prone to a remote code-execution vulnerability.
An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file.
Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.
Microsoft Publisher is prone to a remote code-execution vulnerability.
An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file.
Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
Microsoft Publisher Size Value Heap Memory Corruption Remote Code Execution Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Microsoft Publisher Size Value Heap Memory Corruption Remote Code Execution Vulnerability
Solution:
The vendor released an advisory and updates. Please see the references for more information.
Microsoft Publisher 2003 SP3
Microsoft Publisher 2002 SP3
Microsoft Publisher 2007 SP2
Solution:
The vendor released an advisory and updates. Please see the references for more information.
Microsoft Publisher 2003 SP3
-
Microsoft office2003-KB2284695-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=e600de65-3e9d -4e37-8906-8b7091ff523e
Microsoft Publisher 2002 SP3
-
Microsoft officexp-KB2284692-FullFile-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=f540692c-e404 -4383-8937-4d6a36475da5
Microsoft Publisher 2007 SP2
-
Microsoft publisher2007-kb2284697-fullfile-x86-glb.exe
http://www.microsoft.com/downloads/details.aspx?familyid=79275011-bdc1 -446a-8ea6-56fc31bd9c35
References
Microsoft Publisher Size Value Heap Memory Corruption Remote Code Execution Vulnerability
References:
References:
- Publisher Homepage (Microsoft)
- VUPEN Security Research - Microsoft Office Publisher Size Value Heap Corruption ("VUPEN Security Research"
- Microsoft Security Bulletin MS10-103 (Microsoft)