Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 2 products
CVE-2006-0001 | A document that overfills its box A crafted Publisher file could overflow memory while Microsoft Publisher 2000-2003 parsed fonts, allowing attacker-controlled code to run. Think of forcing too much into a box until its contents spill into nearby controls.
This was a stack-based buffer overflow. Exploitation required a user to open a crafted PUB file; simply receiving a file was not the stated trigger. Lesson: use supported software and treat unexpected documents cautiously. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2006/0xxx/CVE-2006-0001.json
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | office | 2000 | - | - |
| App | microsoft | office | 2003 | - | - |
| App | microsoft | office | 2003 | - | - |
| App | microsoft | office | xp | - | - |
| App | microsoft | publisher | 2000 | - | - |
| App | microsoft | publisher | 2002 | - | - |
| App | microsoft | publisher | 2003 | - | - |