CVE-2008-0102: Microsoft Publisher

High severity, CVSS 10.0. EPSS: 36.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka "Publisher Invalid Memory Reference Vulnerability."

Affected products

• Microsoft Publisher: version 2000 only; version 2002 only; version 2003 only

Published 2008-02-12. Last modified 2026-06-16.