CVE-2008-0104

2008-02-1223:00:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2008-0104

microsoft office

publisher

remote code execution

memory corruption

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.59 Medium

EPSS

Percentile

97.8%

JSON

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka “Publisher Memory Corruption Vulnerability.”

Affected configurations

NVD

Node

microsoftofficeMatch2000

microsoftofficeMatch2003sp2

microsoftofficeMatchxp

microsoftpublisher

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2000
microsoft:officemicrosoft officeeq2003
microsoft:officemicrosoft officeeqxp
microsoft:publishermicrosoft publishereq*

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2000
microsoft:office	microsoft office	eq	2003
microsoft:office	microsoft office	eq	xp
microsoft:publisher	microsoft publisher	eq	*