CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2011-34028.8/HIGHEPSS 78.1%CISA KEV

2011-11-04

Microsoft Windows win32k.sys TrueType Font Parsing Engine Remote Code Execution Vulnerability (CVE-2011-3402, Duqu Exploited)

[Affected Scope] Windows XP, Vista, 7, and Windows Server 2003, 2008 kernel-mode drivers (win32k.sys)

[Impact] Remote code execution (RCE) with kernel-level privileges via crafted TrueType font data in Word documents or web pages

[Mitigation] Apply official MS11-087 security patches or implement the T2EMBED.DLL registry/ACL workaround