Unscored CVE-2011-3411 EUVD-2011-3374GHSA-gqrg-cv49-5pc6

Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handli…

Published Dec 14, 2011 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher Invalid Pointer Vulnerability."

References

oval:org.mitre.oval:def:14346 vdb-entry signature
TA11-347A third-party-advisory
VU#361441 third-party-advisory
1026414 vdb-entry
MS11-091 vendor-advisory