NVD

Id
10051  
Name
CVE-2011-3402  
Description
Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page, as exploited in the wild in November 2011 by Duqu, aka "TrueType Font Parsing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-11-04  
Modified Date
2013-03-06  
Seq
2011-3402  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57672 10051 CVE-2011-3402 http://blogs.mcafee.com/mcafee-labs/the-day-of-the-golden-jackal-%E2%80%93-further-tales-of-the-stuxnet-files  View
57673 10051 CVE-2011-3402 http://blogs.technet.com/b/msrc/archive/2011/11/03/microsoft-releases-security-advisory-2639658.aspx  View
57674 10051 CVE-2011-3402 http://isc.sans.edu/diary/Duqu+Mitigation/11950  View
57675 10051 CVE-2011-3402 oval:org.mitre.oval:def:13998  View
57676 10051 CVE-2011-3402 oval:org.mitre.oval:def:15290  View
57677 10051 CVE-2011-3402 oval:org.mitre.oval:def:15645  View
57678 10051 CVE-2011-3402 http://technet.microsoft.com/security/advisory/2639658  View
57679 10051 CVE-2011-3402 MS11-087  View
57680 10051 CVE-2011-3402 MS12-034  View
57681 10051 CVE-2011-3402 MS12-039  View
57682 10051 CVE-2011-3402 http://www.securelist.com/en/blog/208193197/The_Mystery_of_Duqu_Part_Two  View
57683 10051 CVE-2011-3402 1027039  View
57684 10051 CVE-2011-3402 http://www.symantec.com/connect/w32-duqu_status-updates_installer-zero-day-exploit  View
57685 10051 CVE-2011-3402 http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_precursor_to_the_next_stuxnet.pdf  View
57686 10051 CVE-2011-3402 TA11-347A  View
57687 10051 CVE-2011-3402 TA12-129A  View
57688 10051 CVE-2011-3402 TA12-164A  View
57689 10051 CVE-2011-3402 http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-291-01E.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32799 JVNDB-2011-003039 複数の Microsoft 製品の TrueType フォント解析処理に脆弱性 複数の Microsoft 製品には、TrueType フォントの解析処理に脆弱性が存在します。 CVE-2011-3402 51309 CVE-2011-3402 10051 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003039.html 2011-11-07 2012-06-14 View