CVE-2011-3412

Currently unrated

Key Information:

Vendor
Microsoft
Status
Publisher
Vendor
CVE Published:
14 December 2011

Summary

Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability."

References

http://www.us-cert.gov/cas/techalerts/TA11-347A.html
third-party-advisoryx_refsource_CERT
http://www.kb.cert.org/vuls/id/361441
third-party-advisoryx_refsource_CERT-VN
http://www.securitytracker.com/id?1026414
vdb-entryx_refsource_SECTRACK

EPSS Score

90% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.