CVE-2014-1759

critical Microsoft
CVSS v3 Base Score
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS Score
21.5%
Exploitation probability in 30 days
Top 4% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C
Published: April 8, 2014 (4419 days ago)
Last Modified: May 6, 2026
Vendor: Microsoft
Source: NVD

Description

pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability."

CWE

NVD-CWE-Other

Affected Products

microsoft publisher

References

🔗 docs.microsoft.com 🔗 docs.microsoft.com