CVE-2011-3402

🗓️ 04 Nov 2011 21:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 221 Views🌐 WEB

Unspecified vulnerability in TrueType font parsing engine in win32k.sys in Microsoft Window

Reporter	Title	Published	Views	Family All 43
BDU FSTEC	The vulnerability of the TrueType driver Win32k.sys in the Windows operating system allows a hacker to execute arbitrary code.	4 Jun 202100:00	–	bdu_fstec
Circl	CVE-2011-3402	29 May 201815:50	–	circl
CISA KEV Catalog	Microsoft Windows Remote Code Execution Vulnerability	6 Oct 202500:00	–	cisa_kev
CISA	CISA Adds Seven Known Exploited Vulnerabilities to Catalog	6 Oct 202512:00	–	cisa
Check Point Advisories	Microsoft Windows TrueType Font File Parsing Code Execution (CVE-2011-3402)	6 Nov 201100:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows TrueType Font File Parsing Code Execution - Ver2 (CVE-2011-3402)	18 May 201500:00	–	checkpoint_advisories
Cvelist	CVE-2011-3402	4 Nov 201121:00	–	cvelist
Microsoft KB	MS11-087: Vulnerability in Windows kernel-mode drivers could allow remote code execution: December 13, 2011	13 Dec 201100:00	–	mskb
Microsoft KB	MS12-034: Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight: May 8, 2012	8 May 201200:00	–	mskb
Kaspersky	KLA10544 Code execution vulnerabilities in Microsoft Silverlight	8 May 201200:00	–	kaspersky

NVD

Node

Source	Link
us-cert	www.us-cert.gov/cas/techalerts/TA12-129A.html
blogs	www.blogs.technet.com/b/msrc/archive/2011/11/03/microsoft-releases-security-advisory-2639658.aspx
securitytracker	www.securitytracker.com/id
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039
secunia	www.secunia.com/advisories/49121
securelist	www.securelist.com/en/blog/208193197/The_Mystery_of_Duqu_Part_Two
technet	www.technet.microsoft.com/security/advisory/2639658
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087
symantec	www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_precursor_to_the_next_stuxnet.pdf
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13998

Parameter	Position	Path	Description
CFID	path	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4"CFID"	Registry artifact related to Duqu CVE-2011-3402 exploitation attempt.
CFID	path	HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\CFID	Registry artifact related to Duqu CVE-2011-3402 exploitation attempt.
JmiNET3	path	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\JmiNET3	Registry artifact related to Duqu CVE-2011-3402 exploitation attempt.
FILTER	path	HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\JmiNET3\FILTER	Registry artifact related to Duqu CVE-2011-3402 exploitation attempt.

16 Jun 2026 23:33Current

7.4High risk

Vulners AI Score7.4

CVSS 3.18.8

CVSS 29.3

EPSS0.78285

SSVC