Microsoft Windows Knowledge Base Article 951208 update not installed (WinMs08kb951208Update)

Vuln ID: 42103
Risk Level: Low risk vulnerability  Low WinMs08kb951208Update
Platforms: Microsoft Publisher: 2007 SP1, Microsoft Publisher: 2003 SP2, Microsoft Publisher: 2002 SP3, Microsoft Publisher: 2003 SP3, Microsoft Publisher: 2000 SP3, Microsoft Publisher: 2007
Description:

Microsoft Windows Knowledge Base Article 951208 update is not installed on the system, which could allow a remote attacker to exploit the following vulnerability:

Microsoft Publisher could allow a remote attacker to execute arbitrary code on the system, caused by an error calculating object handler data when opening a Publisher file. By persuading a victim to open a specially-crafted publisher file, a remote attacker could exploit this vulnerability to corrupt memory and execute arbitrary code on the system with the privileges of the victim.

Remedy:

Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS08-027. See References.

False Positives:
False Negatives:
Required Permission: Windows login
Additional Information:

References:

Microsoft Security Bulletin MS08-027
Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208)
http://www.microsoft.com/technet/security/bulletin/ms08-027.mspx

IBM Internet Security Systems X-Force Database
Microsoft object handler code execution
http://xforce.iss.net/xforce/xfdb/42102

ISS X-Force
Microsoft Windows Knowledge Base Article 951208 update not installed
http://www.iss.net/security_center/static/42103.php

CVE CVE-2008-0119
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0119


X-Force Logo
Know Your Risks
Mitre.org CVE Logo
Common Vulnerabilties & Exposures