CVE-2008-0119: Code Injection

Published May 13, 2008

Updated

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation Vulnerability."

Affected Software

6 affected components

Microsoft Office=2007_sp1

Microsoft Office=xp-sp3

Microsoft Office=2003-sp2

Microsoft Office=2007

Microsoft Office=2003-sp3

Microsoft Office=2000-sp3

Event History

May 13, 2008

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-0119?

CVE-2008-0119 is considered critical due to its potential to allow remote code execution.

How do I fix CVE-2008-0119?

To fix CVE-2008-0119, update Microsoft Office to the latest security patches provided by Microsoft.

Which versions of Microsoft Office are affected by CVE-2008-0119?

CVE-2008-0119 affects Microsoft Office 2000, XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier.

Can CVE-2008-0119 be exploited remotely?

Yes, CVE-2008-0119 can be exploited remotely through crafted Publisher files.

What are the potential consequences of CVE-2008-0119?

Exploitation of CVE-2008-0119 may lead to execution of arbitrary code on the affected system.