CVE-2011-3410

EPSS 63.07%
Published 14.12.2011 00:55:01
Last modified 11.04.2025 00:51:21
Source secure@microsoft.com
Teams watchlist Login
Open Login

Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Out-of-bounds Array Index Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Publisher Version2003 Updatesp3

Microsoft ≫ Publisher Version2007 Updatesp2

Microsoft ≫ Publisher Version2007 Updatesp3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	63.07%	0.982

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.us-cert.gov/cas/techalerts/TA11-347A.html

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-091

http://www.kb.cert.org/vuls/id/361441

US Government Resource

http://www.securitytracker.com/id?1026414

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14750

https://nvd.nist.gov/vuln/detail/CVE-2011-3410

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3410

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3410

EUVD