Microsoft Office Publisher 2007 buffer overflow vulnerability

http://secunia.com/advisories/46438/

 

Again, you left out "critical" Someone else will post the same thing with a catchier title.

 

Ha!

On a more serious note, they have been aware of this for months. Why in the hell is it taking so long to patch this?

Source: http://www.coresecurity.com/content/publisher-pubconv-memory-corruption

 

Somewhat OT but,
Re. Secunia, it's worth noting that this advisory, like so many of their advisories, is not based on their original, in-house, research but on a report by an affected party.

That's why Secunia's statistics that this or that software/OS has so many vulnerabilities more than some other software/OS needs to be understood.

Of course, publicists and salesmen will promptly and ruthlessly exploit such "reports" to misguide people. A possible illustration is here:
https://www.wilderssecurity.com/showthread.php?t=310176

 

I actually did think about that as I posted it, but I decided to take a chance .