Lucene search

K
cveMitreCVE-2011-1508
HistoryDec 14, 2011 - 12:55 a.m.

CVE-2011-1508

2011-12-1400:55:01
CWE-94
mitre
web.nvd.nist.gov
109
cve-2011-1508
microsoft publisher
function pointer
memory allocation
remote code execution
vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.165

Percentile

96.1%

Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka β€œPublisher Function Pointer Overwrite Vulnerability.”

Affected configurations

Nvd
Node
microsoftpublisherMatch2003sp3
OR
microsoftpublisherMatch2007sp2
OR
microsoftpublisherMatch2007sp3
VendorProductVersionCPE
microsoftpublisher2003cpe:2.3:a:microsoft:publisher:2003:sp3:*:*:*:*:*:*
microsoftpublisher2007cpe:2.3:a:microsoft:publisher:2007:sp2:*:*:*:*:*:*
microsoftpublisher2007cpe:2.3:a:microsoft:publisher:2007:sp3:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.165

Percentile

96.1%