GCVE - cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*

part: a version: 2003 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Publisher (`c0a7858e-b7e3-572c-aa14-3d584c0f3da7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3068`	vulnerable	2026-06-08 04:50:32.943177	Details available Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension. Published: 2008-07-07T23:00:00.000Z Updated: 2024-08-07T09:21:34.955Z Open on db.gcve.eu Reference links https://www.cynops.de/advisories/AKLINK-SA-2008-003.txt http://securityreason.com/securityalert/3978 http://www.securityfocus.com/archive/1/494101/100/0/threaded http://www.securityfocus.com/bid/28548 https://www.klink.name/security/aklink-sa-2008-004-office2007-signatures.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6534`	vulnerable	2026-06-08 04:50:09.043748	Details available Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted PUB file, possibly involving wordart. Published: 2007-12-27T23:00:00.000Z Updated: 2024-08-07T16:11:05.983Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/26982 http://securityreason.com/securityalert/3490 http://www.securityfocus.com/archive/1/485456/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0671`	vulnerable	2026-06-08 04:49:33.048164	Details available Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks. Published: 2007-02-03T01:00:00.000Z Updated: 2026-01-12T21:01:27.416Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/0463 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A301 http://osvdb.org/31901 http://www.microsoft.com/technet/security/advisory/932553.mspx http://www.kb.cert.org/vuls/id/613740	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3877`	vulnerable	2026-06-08 04:49:10.378977	Details available Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute arbitrary code via an unspecified "crafted file," a different vulnerability than CVE-2006-3435, CVE-2006-4694, and CVE-2006-3876. Published: 2006-10-10T22:00:00.000Z Updated: 2024-08-07T18:48:39.412Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/20325 http://www.securityfocus.com/archive/1/449179/100/0/threaded http://www.kb.cert.org/vuls/id/205948 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A568 http://www.us-cert.gov/cas/techalerts/TA07-044A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0001`	vulnerable	2026-06-08 04:48:45.572200	Details available Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts. Published: 2006-09-12T23:00:00.000Z Updated: 2024-08-07T16:18:20.726Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A590 http://www.kb.cert.org/vuls/id/406236 http://securityreason.com/securityalert/1548 http://securitytracker.com/id?1016825 http://www.securityfocus.com/bid/19951	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0573`	vulnerable	2026-06-08 04:47:50.396844	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0200`	vulnerable	2026-06-08 04:47:48.950440	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.