CVE-2007-6534: Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to...

Security readout for executives and security teams

This CVE describes crashes in Microsoft Office Publisher when a user opens a specially crafted .PUB file. The sources characterize the issue as denial of service, not code execution. Business risk is mainly disruption and malicious-document exposure, but exact affected versions, severity, and fixes are not provided in the supplied material. Organizations that still allow Microsoft Office Publisher or .PUB attachments from untrusted sources may be exposed. Exact version scope is unavailable in the provided sources, so exposure should be treated as product- and configuration-dependent. Treat this as a hygiene and exposure-reduction item unless internal Publisher use is significant. The supplied evidence supports user-assisted denial of service, with no confirmed active exploitation or severity score. Mitigation focus: Check Microsoft guidance for affected Publisher versions and available updates.; Restrict or quarantine unexpected .PUB attachments from external senders.; Warn users not to open Publisher files from untrusted sources..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.