CVE-2010-2571: Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003...

Security readout for executives and security teams

This is an old Microsoft Publisher remote code execution flaw. A malicious Publisher 97 file could corrupt memory in Publisher 2002 SP3 or 2003 SP3 and let an attacker run code if a user opens it. Exposure is most likely on legacy endpoints still running Microsoft Publisher 2002 SP3 or Publisher 2003 SP3, especially where users can receive and open old Publisher files from email, file shares, or archives. Prioritize if legacy Office software remains in use. The business risk is user-driven code execution from malicious documents, with highest concern in organizations retaining old Office versions for archival workflows. Mitigation focus: Apply Microsoft guidance and security updates from MS10-103 where applicable.; Retire or upgrade Publisher 2002 and 2003 installations where possible.; Restrict or quarantine untrusted Publisher 97 files at email and web gateways..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.