CVE-2011-3410

Currently unrated

Key Information:

Vendor: Microsoft
Status: Publisher
Vendor: CVE Published:; 14 December 2011

Summary

Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Out-of-bounds Array Index Vulnerability."

References

http://www.us-cert.gov/cas/techalerts/TA11-347A.html

third-party-advisoryx_refsource_CERT

http://www.kb.cert.org/vuls/id/361441

third-party-advisoryx_refsource_CERT-VN

http://www.securitytracker.com/id?1026414

vdb-entryx_refsource_SECTRACK

EPSS Score

96% chance of being exploited in the next 30 days.

Timeline

Vulnerability published
Dec 14, 2011
Vulnerability Reserved
Sep 9, 2011

Collectors

NVD DatabaseMitre Database