Description
pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability."
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-020
Scores
EPSS
0.1425
EPSS Percentile
96.2%
Details
Status
published
Products (2)
microsoft/publisher
2003 sp3
microsoft/publisher
2007 sp3
Published
Apr 08, 2014
Tracked Since
Feb 18, 2026