Unscored CVE-2011-3412 EUVD-2011-3375GHSA-7hj7-cjjc-fh86

Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that lev…

Published Dec 14, 2011 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka "Publisher Memory Corruption Vulnerability."

References

TA11-347A third-party-advisory
VU#361441 third-party-advisory
1026414 vdb-entry
oval:org.mitre.oval:def:14808 vdb-entry signature
MS11-091 vendor-advisory