CVE-2009-0566
Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher...
Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
- Record
CVE-2009-0566- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
- Record
CVE-2009-0566- Updated
- 2026-11-02
EUVDEUVD-2009-0570 No score
Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
- Record
EUVD-2009-0570- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4564-2f76-rv6p No score
Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher...
Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, which allows remote attackers to execute arbitrary code via a crafted file in a legacy format that triggers memory corruption, aka "Pointer Dereference Vulnerability."
- Record
GHSA-4564-2f76-rv6p- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0566 is a high vulnerability (CVSS 9.3) in Microsoft Office Publisher, published July 15, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 28.9%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6285
securitytracker.com/id?1022546
osvdb.org/55838
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-030
securityfocus.com/bid/35599
vupen.com/english/advisories/2009/1888
us-cert.gov/cas/techalerts/TA09-195A.html
nvd.nist.gov/vuln/detail/CVE-2009-0566
github.com/advisories/GHSA-4564-2f76-rv6p