VDB

GCVE-110-CERTCC-2011-361441

GCVE-110-CERTCC-2011-361441
Advisory PublishedCVSS 9.0/10
Vulnetix · Advisory published December 13, 2011
Microsoft Office Publisher fails to properly validate Publisher documents, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.
Download JSON Open in Console

Risk Scores

CVSS 2.0
9.0/10
Critical · AV:N/AC:M/Au:N/C:C/I:C/A:P
certcc-cam
certcc-cam
impact15population10exploitation0widely_known10score_current6.69375ease_of_exploitation7
certcc-vrda
certcc-vrda
d1_impact4d1_population4d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7remediation_levelOFreport_confidenceCenvironmental_score7target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2011-3410CVE-2011-3411CVE-2011-3412

References

Microsoft Office Publisher contains multiple exploitable vulnerabilities
url
Microsoft Office Publisher contains multiple exploitable vulnerabilities
url
Microsoft Office Publisher contains multiple exploitable vulnerabilities
url
Microsoft Office Publisher contains multiple exploitable vulnerabilities
advisory
Microsoft Office Publisher contains multiple exploitable vulnerabilities
advisory
Microsoft Office Publisher contains multiple exploitable vulnerabilities
advisory

Browse GCVE Records

74,299 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›