HTTP: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow1

This signature detects attempts to exploit a known stack buffer overflow vulnerability in Microsoft Office Publisher. It is due to the way Publisher parses certain values in a Microsoft Publisher file. Remote attackers can exploit this by enticing the target user to open a malicious file. A successful attack can result in execution of arbitrary code within the security context of the currently logged in user. An unsuccessful attempt terminates the affected application abnormally.

Short Name

HTTP:STC:DL:PUB-TEXTBOX1

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow1

Found a potential security threat?