CVE

Id
51314  
CVE No.
CVE-2011-3402  
Status
Candidate  
Description
Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka "TrueType Font Parsing Vulnerability."  
Phase
Assigned (20110909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
553304 51314 CVE-2011-3402 MISC:http://blogs.mcafee.com/mcafee-labs/the-day-of-the-golden-jackal-%E2%80%93-further-tales-of-the-stuxnet-files  View
553305 51314 CVE-2011-3402 MISC:http://isc.sans.edu/diary/Duqu+Mitigation/11950  View
553306 51314 CVE-2011-3402 MISC:http://www.securelist.com/en/blog/208193197/The_Mystery_of_Duqu_Part_Two  View
553307 51314 CVE-2011-3402 MISC:http://www.symantec.com/connect/w32-duqu_status-updates_installer-zero-day-exploit  View
553308 51314 CVE-2011-3402 MISC:http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_precursor_to_the_next_stuxnet.pdf  View
553309 51314 CVE-2011-3402 MISC:http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-291-01E.pdf  View
553310 51314 CVE-2011-3402 CONFIRM:http://blogs.technet.com/b/msrc/archive/2011/11/03/microsoft-releases-security-advisory-2639658.aspx  View
553311 51314 CVE-2011-3402 CONFIRM:http://technet.microsoft.com/security/advisory/2639658  View
553312 51314 CVE-2011-3402 MS:MS11-087  View
553313 51314 CVE-2011-3402 URL:http://technet.microsoft.com/security/bulletin/MS11-087  View
553314 51314 CVE-2011-3402 MS:MS12-034  View
553315 51314 CVE-2011-3402 URL:http://technet.microsoft.com/security/bulletin/MS12-034  View
553316 51314 CVE-2011-3402 MS:MS12-039  View
553317 51314 CVE-2011-3402 URL:http://technet.microsoft.com/security/bulletin/MS12-039  View
553318 51314 CVE-2011-3402 CERT:TA11-347A  View
553319 51314 CVE-2011-3402 URL:http://www.us-cert.gov/cas/techalerts/TA11-347A.html  View
553320 51314 CVE-2011-3402 CERT:TA12-129A  View
553321 51314 CVE-2011-3402 URL:http://www.us-cert.gov/cas/techalerts/TA12-129A.html  View
553322 51314 CVE-2011-3402 CERT:TA12-164A  View
553323 51314 CVE-2011-3402 URL:http://www.us-cert.gov/cas/techalerts/TA12-164A.html  View
553324 51314 CVE-2011-3402 OVAL:oval:org.mitre.oval:def:13998  View
553325 51314 CVE-2011-3402 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13998  View
553326 51314 CVE-2011-3402 OVAL:oval:org.mitre.oval:def:15290  View
553327 51314 CVE-2011-3402 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15290  View
553328 51314 CVE-2011-3402 OVAL:oval:org.mitre.oval:def:15645  View
553329 51314 CVE-2011-3402 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15645  View
553330 51314 CVE-2011-3402 SECTRACK:1027039  View
553331 51314 CVE-2011-3402 URL:http://www.securitytracker.com/id?1027039  View
553332 51314 CVE-2011-3402 SECUNIA:49121  View
553333 51314 CVE-2011-3402 URL:http://secunia.com/advisories/49121  View
553334 51314 CVE-2011-3402 SECUNIA:49122  View

Related JVN