Remote Code Execution in Microsoft Publisher by Microsoft

CVE-2011-3411

What is CVE-2011-3411?

Microsoft Publisher 2003 SP3 contains a vulnerability that can be exploited by remote attackers to execute arbitrary code. This occurs through specially crafted Publisher files that manipulate memory handling, leading to possible unauthorized actions on the victim's system. Users of the affected versions should apply the security updates provided by Microsoft to mitigate these risks.

References