Vulnerabilidad en fuentes TrueType Microsoft (CVE-2011-3402)
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/11/2011
Última modificación:
22/04/2026
Descripción
Vulnerabilidad no especificada en el motor de análisis de fuentes TrueType de Win32k en el kernel de Microsoft Windows XP SP2 y SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 Service Pack 2, R2 y R2 SP1, y Windows 7 Oro y SP1 permite a atacantes remotos ejecutar código arbitrario a través de los datos de la fuente modificada en un documento de Word, como se explotó "in the wild" en noviembre de 2011 por Duqu.
Impacto
Puntuación base 3.x
8.80
Gravedad 3.x
ALTA
Puntuación base 2.0
9.30
Gravedad 2.0
ALTA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:* | ||
| cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:* | ||
| cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:* | ||
| cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:* | ||
| cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:* | ||
| cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página
Referencias a soluciones, herramientas e información
- http://blogs.mcafee.com/mcafee-labs/the-day-of-the-golden-jackal-%E2%80%93-further-tales-of-the-stuxnet-files
- http://blogs.technet.com/b/msrc/archive/2011/11/03/microsoft-releases-security-advisory-2639658.aspx
- http://isc.sans.edu/diary/Duqu+Mitigation/11950
- http://secunia.com/advisories/49121
- http://secunia.com/advisories/49122
- http://technet.microsoft.com/security/advisory/2639658
- http://www.securelist.com/en/blog/208193197/The_Mystery_of_Duqu_Part_Two
- http://www.securitytracker.com/id?1027039
- http://www.symantec.com/connect/w32-duqu_status-updates_installer-zero-day-exploit
- http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_precursor_to_the_next_stuxnet.pdf
- http://www.us-cert.gov/cas/techalerts/TA11-347A.html
- http://www.us-cert.gov/cas/techalerts/TA12-129A.html
- http://www.us-cert.gov/cas/techalerts/TA12-164A.html
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-291-01E.pdf
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13998
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15290
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15645
- http://blogs.mcafee.com/mcafee-labs/the-day-of-the-golden-jackal-%E2%80%93-further-tales-of-the-stuxnet-files
- http://blogs.technet.com/b/msrc/archive/2011/11/03/microsoft-releases-security-advisory-2639658.aspx
- http://isc.sans.edu/diary/Duqu+Mitigation/11950
- http://secunia.com/advisories/49121
- http://secunia.com/advisories/49122
- http://technet.microsoft.com/security/advisory/2639658
- http://www.securelist.com/en/blog/208193197/The_Mystery_of_Duqu_Part_Two
- http://www.securitytracker.com/id?1027039
- http://www.symantec.com/connect/w32-duqu_status-updates_installer-zero-day-exploit
- http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_precursor_to_the_next_stuxnet.pdf
- http://www.us-cert.gov/cas/techalerts/TA11-347A.html
- http://www.us-cert.gov/cas/techalerts/TA12-129A.html
- http://www.us-cert.gov/cas/techalerts/TA12-164A.html
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-291-01E.pdf
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-039
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13998
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15290
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15645
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-3402