Multiple vulnerabilities have been reported in Microsoft Office Publisher, which can be exploited by malicious people to compromise a user's system.

1) An error in the Publisher Converter (pubconv.dll) when parsing files can be exploited to corrupt memory.

2) An error in the Publisher Converter (pubconv.dll) when parsing files can be exploited to cause a heap-based buffer overflow.

3) An array indexing error in the Publisher Converter (pubconv.dll) when processing Publisher 97 files can be exploited to corrupt memory.

4) An error when processing Publisher files can be exploited to corrupt memory via a specially crafted file.

5) An array indexing error in the Publisher Converter (pubconv.dll) when processing files can be exploited to corrupt memory.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Chaouki Bekrar, Vupen.

Original Advisory
MS10-103 (KB2284692, KB2284695, KB2284697, KB2409055):
http://www.microsoft.com/technet/security/bulletin/ms10-103.mspx

Deep Links
Links available to Secunia VIM customers