CVE-2009-0566: Microsoft Office Publisher 2007 SP1 does not properly calculate object handler data for Publisher files, wh...

Security readout for executives and security teams

This vulnerability affects Microsoft Office Publisher 2007 SP1 handling of Publisher files. A malicious file in a legacy format can trigger memory corruption and potentially run attacker-controlled code. Business risk is mainly tied to old Office installations and users opening untrusted Publisher files. Exposure is most likely in legacy Windows environments still running Microsoft Office Publisher 2007 SP1 or handling old Publisher files. Modern environments without Publisher 2007 SP1 are less likely exposed, but asset evidence is required. Treat this as a high-priority legacy software risk if Office Publisher 2007 remains in use. If asset inventory confirms no Publisher 2007 SP1 exposure, priority drops substantially. Mitigation focus: Apply Microsoft guidance and security update MS09-030 where applicable.; Inventory systems for Microsoft Office Publisher 2007 SP1.; Retire or isolate unsupported Office 2007 installations..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.