CVE-2014-1759

Published: Apr 8, 2014Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability."

Affected (2)

Products: Microsoft: Publisher

Microsoft

1 product

Publisher

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Publisher	Version 2003 sp3
Microsoft Publisher	Version 2007 sp3

References (2)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-020

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-020

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.