HTTP: Microsoft Office Publisher Memory Corruption

This signature detects attempts to exploit a known vulnerability against Microsoft Office Publisher. A successful attack can lead to memory corruption and arbitrary code execution.

Extended Description

Microsoft Office Publisher is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to cause the affected application to crash. The attacker may also be able to execute arbitrary code in the context of the user running the affected application, but this has not been confirmed.

Affected Products

Microsoft publisher_2000

Short Name
HTTP:STC:DL:MS-PUBLISHER-MC
Severity
Major
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2007-6534 CVE-2011-3411 Corruption Memory Microsoft Office Publisher bid:22724 bid:26982 bid:50949
Release Date
11/15/2012
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3720
False Positive
Occasionally
Vendors

Microsoft

CVSS Score

9.3

6.8

Found a potential security threat?