CVE-2011-3400 Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Prop...
HighCVSS 9.3
EPSS 71.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 do not properly handle OLE objects in memory, which allows remote attackers to execute arbitrary code via a crafted object in a file, aka "OLE Property Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows server 2003 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- TA11-347A third-party-advisory us-government-resource
- MS11-093 vendor-advisory
- oval:org.mitre.oval:def:14668 signature vdb-entry