Oval Definition:oval:org.mitre.oval:def:6285
Revision Date:2014-08-18Version:9
Title:Pointer Dereference Vulnerability
Description:Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2009-0566
Platform(s):Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Publisher 2007
Definition Synopsis
  • Microsoft Publisher 2007 is installed
  • AND the version of Mspub.exe is less than 12.0.6501.5000
  • BACK