Lucene search
MicrosoftCVE-2011-3410HistoryDec 14, 2011 - 12:55 a.m.
CVE-2011-3410
2011-12-1400:55:01
CWE-20
microsoft
web.nvd.nist.gov
52
microsoft publisher
array index error
remote code execution
cve-2011-3410
memory handling
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.961
Percentile
99.5%
Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka “Publisher Out-of-bounds Array Index Vulnerability.”
Affected configurations
Node
microsoftpublisherMatch2003sp3
ORmicrosoftpublisherMatch2007sp2
ORmicrosoftpublisherMatch2007sp3
Related
prion
prion
Out-of-bounds
2011-12-14 00:55:00
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2011-3410
2011-12-14 00:55:01
cvelist
cvelist
CVE-2011-3410
2011-12-14 00:00:00
cert
cert
Microsoft Office Publisher contains multiple exploitable vulnerabilities
2011-12-13 00:00:00
nessus
nessus
openvas
openvas
Microsoft Publisher Remote Code Execution Vulnerabilities (2607702)
2011-12-14 00:00:00
securityvulns
securityvulns
Microsoft Office multiple security vulnerabilities
2011-12-15 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.961
Percentile
99.5%
Related for CVE-2011-3410